CISSP · Question #1034
A software development company found odd behavior in some recently developed software, creating a need for a more thorough code review. What is the MOST effective argument for a more thorough code…
The correct answer is D. lt will reduce the potential for vulnerabilities. The most effective argument for a more thorough code review is that it will reduce the potential for vulnerabilities. A code review is a process of examining and evaluating the source code of a software program to identify and correct any errors, defects, or weaknesses that may…
Question
Options
- AIt will increase flexibility of the applications developed.
- BIt will increase accountability with the customers.
- CIt will impede the development process.
- Dlt will reduce the potential for vulnerabilities.
How the community answered
(43 responses)- A26% (11)
- B5% (2)
- C12% (5)
- D58% (25)
Explanation
The most effective argument for a more thorough code review is that it will reduce the potential for vulnerabilities. A code review is a process of examining and evaluating the source code of a software program to identify and correct any errors, defects, or weaknesses that may affect its functionality, quality, security, or performance. A more thorough code review will increase the chances of finding and fixing the vulnerabilities in the code, such as logic flaws, buffer overflows, input validation errors, or insecure coding practices. A more thorough code review will also improve the security posture of the software, as it will reduce the attack surface, mitigate the risks, and comply with the standards and regulations. A more thorough code review may also provide other benefits, such as increasing the flexibility, accountability, or efficiency of the software development process, but these are not the most effective or persuasive arguments for a more thorough code review, as they may not be directly related to the security objectives or requirements of the software.
Topics
Community Discussion
No community discussion yet for this question.