While reviewing a recent compromise, a forensics team discovers that there are hard-coded credentials in the database connection strings. Which of the following assessment types should be performed…

The correct answer is C. Static analysis. Static analysis examines source code without executing it, enabling the detection of security flaws such as hard-coded credentials early in the software development process.

Submitted by layla.eg· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

While reviewing a recent compromise, a forensics team discovers that there are hard-coded credentials in the database connection strings. Which of the following assessment types should be performed during software development to prevent this from reoccurring?

Options

AVulnerability scan
BPenetration test
CStatic analysis
DQuality assurance

How the community answered

(55 responses)

A
15% (8)
B
7% (4)
C
75% (41)
D
4% (2)

Explanation

Static analysis examines source code without executing it, enabling the detection of security flaws such as hard-coded credentials early in the software development process.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice