A Deployment Manager Is Working with a Software Development Group

question 193

Multiple Choice

A deployment manager is working with a software development group to assess the security of a new version of the organization's internally developed ERP tool. The organization prefers to not perform assessment activities following deployment, instead focusing on assessing security throughout the life cycle. Which of the following methods would BEST assess the security of the product?

• A) Static code analysis in the IDE environment
• B) Penetration testing of the UAT environment
• C) Vulnerability scanning of the production environment
• D) Penetration testing of the production environment
• E) Peer review prior to unit testing

---

Definitions:

Employee Motivation

The degree of enthusiasm, dedication, and inventiveness that employees of a firm apply to their roles.

Interdependent Tasks

Tasks that require coordination and collaboration among team members to be completed effectively.

Reward System

A framework within an organization designed to recognize and reward employee performance and contribute to motivation and satisfaction.

Maximum Efficiency

The optimal use of resources to achieve the highest possible output or productivity with the least amount of input or waste.