Which of the following is a common term for log reviews, synthetic transactions, and code reviews?

Security control testing encompasses a variety of assessment techniques - including log reviews (examining audit trails for anomalies), synthetic transactions (simulating user activity to test system behavior), and code reviews (analyzing source code for vulnerabilities) - all of which are used to verify that security controls are functioning as intended. These methods are formally categorized under security control testing in frameworks like NIST SP 800-53A and ISC2 security assessment guidance.

Application development is a software engineering lifecycle process focused on building applications, not a term that categorizes security assessment techniques like log reviews or synthetic transactions.

Spiral development functional testing refers to a specific iterative software development methodology's testing phase, not a common umbrella term for security assessment techniques.

DevOps Integrated Product Team (IPT) development is a project management and collaboration framework used in defense and enterprise environments, and does not describe the category of security evaluation techniques listed.