From a security standpoint, the product development life cycle consists of which of the following?

Code review is only one specific activity and does not encompass the entire security product development life cycle, which includes design, testing, and formal approval stages.

Certification is a formal process of technical evaluation but does not cover the complete spectrum of security activities during product development, such as design or coding practices.

Accreditation is a formal management decision to operate a system, which is a post-certification step and doesn't cover the full development lifecycle activities like design or testing.

Functional design review is an important early-stage security consideration but does not address the security aspects of coding, testing, or formal authorization.

System test review focuses on the testing phase for security but omits crucial security activities that occur during the design, coding, and formal approval stages of product development.

A secure product development life cycle (SDLC) integrates security activities throughout all phases, meaning elements like functional design review (D) for early security considerations, code review (A) for implementation quality, and system test review (E) for validation are crucial. Additionally, formal processes like certification (B) and accreditation (C) are often part of the security assurance lifecycle for products, ensuring a comprehensive security approach.