Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?

Question

Options

• AUser acceptance testing (UAT)
• BData classification
• CPrivacy impact assessment (PIA)
• DAutomatic dynamic code scan

• A
  19% (10)
• B
  6% (3)
• C
  10% (5)
• D
  65% (34)

Explanation

Automatic dynamic code scanning (DAST - Dynamic Application Security Testing) tests the running mobile application in real time, identifying runtime vulnerabilities such as insecure data transmission, improper session handling, and data leakage that static analysis or reviews would miss. It continuously validates security posture throughout the development lifecycle. Option A (UAT) tests functional requirements from a user's perspective, not security compliance. Option B (data classification) defines sensitivity levels but does not directly test the application's security implementation. Option C (PIA) assesses privacy risks in the design phase but does not test the implemented code for technical security flaws.

No community discussion yet for this question.