CAS-005 · Question #428
A software development company needs to mitigate third-party risks to its software supply chain. Which of the following techniques should the company use in the development environment to best meet…
The correct answer is A. Performing software composition analysis. Software Composition Analysis (SCA) tools inventory and continuously monitor all third-party and open-source components in your codebase, flagging known vulnerabilities and license issues before they make it into production. This directly addresses supply-chain risk by ensuring…
Question
A software development company needs to mitigate third-party risks to its software supply chain. Which of the following techniques should the company use in the development environment to best meet this objective?
Options
- APerforming software composition analysis
- BRequiring multifactor authentication
- CEstablishing coding standards and monitoring for compliance
- DImplementing a robust unit and regression-testing scheme
How the community answered
(41 responses)- A80% (33)
- B7% (3)
- C10% (4)
- D2% (1)
Explanation
Software Composition Analysis (SCA) tools inventory and continuously monitor all third-party and open-source components in your codebase, flagging known vulnerabilities and license issues before they make it into production. This directly addresses supply-chain risk by ensuring you know exactly which external libraries you’re using and whether they contain any security flaws.
Community Discussion
No community discussion yet for this question.