As part of ASAP what type of analysis is performed during the design and build phase?
-
Dynamic code analysis
-
Static code analysis
-
Both
-
None
B
Correct answer
Explanation
Static code analysis is performed during the design and build phase because it examines source code without executing the program, allowing early detection of security vulnerabilities during development. Dynamic analysis requires running the application, which typically happens later during testing phases. Combining both (option C) would be redundant at this stage.