Which techniques are commonly used to perform code analysis during software development and testing? (Choose 2)

Dependency vulnerability scanning is a specific type of static analysis that focuses on known vulnerabilities in third-party libraries and components, rather than a broad code analysis technique itself.

Dynamic code analysis (DCA), also known as Dynamic Application Security Testing (DAST), analyzes the running application to identify vulnerabilities and defects that might not be visible in static code. It simulates attacks or unusual input to observe the system's behavior in real-time under operational conditions.

A peer walkthrough review is a manual inspection process where developers collaboratively examine code for errors and quality, which is not an automated "code analysis" technique in the same vein as static or dynamic analysis.

Static code analysis (SCA) examines the source code, bytecode, or binary code without executing the program to identify potential vulnerabilities, coding errors, and adherence to coding standards. It is often integrated into the build process as an early detection mechanism.