During a vulnerability management process that lasted several months, a security analyst found the number of vulnerabilities in a production web application consistently grew. Which of the following…

The correct answer is D. Implement security scanning during the pipeline for the CI/CD flow. Integrating security scanning in the CI/CD pipeline ensures that vulnerabilities are detected and addressed during the development process, reducing the accumulation of issues over time.

Information Gathering and Vulnerability Scanning

Question

During a vulnerability management process that lasted several months, a security analyst found the number of vulnerabilities in a production web application consistently grew. Which of the following should the analyst do to best remediate this situation?

Options

APerform penetration testing regularly.
BPerform a security evaluation based on the OWASP Top 10.
CImplement a peer review process during the coding phase.
DImplement security scanning during the pipeline for the CI/CD flow.

How the community answered

(45 responses)

A
2% (1)
B
9% (4)
C
4% (2)
D
84% (38)

Explanation

Integrating security scanning in the CI/CD pipeline ensures that vulnerabilities are detected and addressed during the development process, reducing the accumulation of issues over time.

Topics

#CI/CD security#Application security#Vulnerability scanning#DevSecOps

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice