Multiple choice technology security

_______ is a static ruleset based Java source code analyzer that identifies potential problems.

  1. Ounce

  2. DevInspect

  3. Fortify

  4. PMD
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

PMD is a well-known open source static code analysis tool for Java that checks for common programming flaws and unused code. It uses a ruleset-based approach to identify potential problems like unused variables, empty catch blocks, or inefficient object creation. Ounce and Fortify are commercial static analysis tools, while DevInspect is not a recognized static analyzer.

Keep practicing — related questions