Multiple choice technology security

As part of ASAP what type of analysis is performed during the design and build phase?

  1. Dynamic code analysis

  2. Static code analysis

  3. Both

  4. None

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

During the design and build phases, the application code is available but may not be fully deployed or executable in runtime environments. Static code analysis examines source code for vulnerabilities without needing to execute the application. Dynamic analysis requires a running application to interact with and observe behavior, which typically happens in later testing phases.