During which phase should you use static code analysis?

Your company develops a client banking application that processes a large volume of data.

Code quality is an ongoing issue for the company. Recently, the code quality has deteriorated because of an increase in time pressure on the development team.

You need to implement static code analysis.

During which phase should you use static code analysis?
A . build
B . production release
C . staging
D . integration testing

View Answer

Answer: B

Explanation:

The Secure Development Lifecycle (SDL) Guidelines recommend that teams perform static analysis during the implementation phase of their development cycle.

Note: The company should focus in particular on the implementation of DevOps tests to assess

the quality of the software from the planning stage to the implementation phase of the project.

References: https://secdevtools.azurewebsites.net/