To ensure that integration of security testing is implemented on large code sets in environments where time to completion is critical, what form of validation should an auditor expect?

The correct answer is B. Full application stack unit testing. Full application stack unit testing is the appropriate form of validation for large codebases in time-critical environments because unit tests are automated, fast-executing, and can be integrated directly into CI/CD pipelines. They cover all layers of the application stack…

Cloud Security Auditing

Question

Options

AParallel testing
BFull application stack unit testing
CRegression testing
DFunctional verification

How the community answered

(23 responses)

A
4% (1)
B
83% (19)
C
9% (2)
D
4% (1)

Explanation

Full application stack unit testing is the appropriate form of validation for large codebases in time-critical environments because unit tests are automated, fast-executing, and can be integrated directly into CI/CD pipelines. They cover all layers of the application stack (presentation, business logic, data) at a granular level, enabling security testing to run continuously without blocking delivery. Parallel testing (A) refers to running tests concurrently and is a technique, not a form of validation in this context. Regression testing (C) checks for regressions in existing functionality. Functional verification (D) is broader and slower, less suited to rapid, large-scale automated security integration.

Topics

#Security Testing#Unit Testing#SDLC Security#Auditor Expectations

Community Discussion

No community discussion yet for this question.

Full CCAK Practice