A security engineer performed a code scan that resulted in many false positives. The security engineer must find a solution that improves the quality of scanning results before application…

Question

Options

• ALimiting the tool to a specific coding language and tuning the rule set
• BConfiguring branch protection rules and dependency checks
• CUsing an application vulnerability scanner to identify coding flaws in production
• DPerforming updates on code libraries before code development

• A
  81% (13)
• B
  13% (2)
• C
  6% (1)

Explanation

To improve the quality of code scanning results and reduce false positives, the best solution is to limit the tool to a specific coding language and fine-tune the rule set. By configuring the code scanning tool to focus on the specific language used in the application, the tool can more accurately identify relevant issues and reduce the number of false positives. Additionally, tuning the rule set ensures that the tool's checks are appropriate for the application's context, further improving the accuracy of the scan results.

No community discussion yet for this question.