CISSP · Question #1344
Security Software Development Life Cycle (SDLC) expects application code to be written In a consistent manner to allow ease of auditing and which of the following?
The correct answer is D. Enhancing. Secure SDLC requires consistent coding standards to facilitate both auditing and future enhancement of application code. Readable, well-structured code supports long-term maintainability and security reviews.
Question
Options
- AProtecting
- BExecuting
- CCopying
- DEnhancing
How the community answered
(64 responses)- A8% (5)
- B3% (2)
- C2% (1)
- D88% (56)
Why each option
Secure SDLC requires consistent coding standards to facilitate both auditing and future enhancement of application code. Readable, well-structured code supports long-term maintainability and security reviews.
While protection is a goal of Secure SDLC overall, 'protecting' is not the specific benefit derived from writing code in a consistent manner alongside auditing; it is a broader outcome.
Executing refers to running code at runtime, which is unrelated to why consistent coding standards are maintained in Secure SDLC; execution is not affected by coding style consistency.
Copying code is not a recognized goal or benefit of consistent coding standards within Secure SDLC; code reuse is a separate concept and not the intended answer in this context.
In Secure SDLC, writing code in a consistent manner serves two primary purposes: enabling security audits (code reviews to find vulnerabilities) and enhancing the codebase over time. Consistent coding standards make it easier for developers to understand, modify, and improve code securely without introducing new flaws, which is a core principle of secure software development practices.
Concept tested: Secure SDLC consistent coding standards and maintainability
Source: https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/
Topics
Community Discussion
No community discussion yet for this question.