Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Softwares and Software Security

A Mumbai fintech firm wants its developers to follow a structured approach in which security requirements, threat modelling, secure coding and security testing are built into every phase of software development rather than added at the end. Which approach does this describe?

The approach is Secure SDLC. It integrates security activities such as requirements analysis, threat modelling, secure coding and testing into every development phase, so vulnerabilities are prevented early rather than discovered only after release through late testing.

  1. ASecure Software Development Life Cycle (Secure SDLC)Correct
  2. BPost-release penetration testing only
  3. CBlack-box acceptance testing
  4. DDisaster recovery planning

Explanation

Secure SDLC integrates security activities such as requirements, design review, coding standards and testing into each phase. Post-release penetration testing alone is a late-stage activity and does not embed security throughout development.

Did you get it right without looking?

One question tells you little. A timed set on Softwares and Software Security shows your real accuracy, how long you take and where you lose marks.

Practise Softwares and Software SecurityFree diagnostic mock

More Softwares and Software Security questions