CISSP Practice Question (Security Assessment and Testing - Hard):
Your company has recently integrated a new software application into its existing system. As a security professional, you are tasked with ensuring that this integration does not introduce vulnerabilities. Which sequence of testing and assessment activities should you prioritize to maintain a secure environment?
Options:
A. Conduct a syntax-based testing followed by a black-box penetration test
B. Initiate a white-box testing, followed by static application security testing and finally conduct vulnerability scanning
C. Start with a dynamic application security testing, supplemented by manual testing and conclude with automated security testing
D. Perform black-box testing, followed by dynamic testing and checking for zero-day vulnerabilities
(Answer tomorrow!) Study more at: cissp.app
2
23 comments
Vincent Primiani
7
CISSP Practice Question (Security Assessment and Testing - Hard):
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by