A Security Engineer Is Embedded with a Development Team to Ensure

question 108

Multiple Choice

A security engineer is embedded with a development team to ensure security is built into products being developed. The security engineer wants to ensure developers are not blocked by a large number of security requirements applied at specific schedule points. Which of the following solutions BEST meets the engineer's goal?

• A) Schedule weekly reviews of al unit test results with the entire development team and follow up between meetings with surprise code inspections.
• B) Develop and implement a set of automated security tests to be installed on each development team leader's workstation.  
• C) Enforce code quality and reuse standards into the requirements definition phase of the waterfall development process.
• D) Deploy an integrated software tool that builds and tests each portion of code committed by developers and provides feedback.

---

Definitions:

North Atlantic Treaty Organization

An intergovernmental military alliance between 30 North American and European countries.

1949

The year notable for several historical events, including the formation of NATO and the conclusion of the Chinese Civil War with the Communist Party of China taking control of Mainland China.

Formed

Established or created with a specific structure or intended purpose.

UN General Assembly

A principal organ of the United Nations, comprising all member states, it serves as a forum for deliberating international issues covered by the UN Charter.