Which of me following should be performed FIRST?

An organization is developing software to match customers’ expectations.

Before the software goes into production, it must meet the following quality assurance guidelines

• Uncover all the software vulnerabilities.

• Safeguard the interest of the software’s end users.

• Reduce the likelihood that a defective program will enter production.

• Preserve the Interests of me software producer

Which of me following should be performed FIRST?
A . Run source code against the latest OWASP vulnerabilities.
B . Document the life-cycle changes that look place.
C . Ensure verification and vacation took place during each phase.
D . Store the source code in a s oftware escrow.
E . Conduct a static analysis of the code.

View Answer

Answer: E

Explanation:

Static analysis of the code is a technique that scans the source code or the compiled code of an application without executing it, to identify potential vulnerabilities, errors, or bugs. Static analysis can help uncover all the software vulnerabilities, safeguard the interest of the software’s end users, reduce the likelihood that a defective program will enter production, and preserve the interests of the software producer by improving the quality and security of the code before it is deployed or run1

Reference: 1 What Is Static Analysis? | Veracode