Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security…

Question

Options

• AEnsure every code check-in is peer reviewed by a security SME.
• BUse source code security analyzers as part of the CI/CD pipeline.
• CEnsure you have stubs to unit test all interfaces between components.
• DEnable code signing and a trusted binary repository integrated with your CI/CD pipeline.
• ERun a vulnerability security scanner as part of your continuous-integration /continuous-delivery

• A
  14% (5)
• B
  76% (28)
• C
  8% (3)
• D
  3% (1)

Explanation

B - Static analysis inspects your source code to identify defects, vulnerabilities, and compliance issues as you code without having to run the program. This makes static analysis an essential component of your pipeline. E - Container Analysis provides vulnerability scanning and metadata storage for containers through Container Analysis. The scanning service performs vulnerability scans on images in Artifact Registry and Container Registry, then stores the resulting metadata and makes it available for consumption through an API. Metadata storage allows storing information from different sources, including vulnerability scanning, other Cloud services, and third-party providers. https://cloud.google.com/container-registry/docs/container-analysis

No community discussion yet for this question.