A Deployment Manager Is Working with a Software Development Group

question 193

Multiple Choice

A deployment manager is working with a software development group to assess the security of a new version of the organization's internally developed ERP tool. The organization prefers to not perform assessment activities following deployment, instead focusing on assessing security throughout the life cycle. Which of the following methods would BEST assess the security of the product?

• A) Static code analysis in the IDE environment
• B) Penetration testing of the UAT environment
• C) Vulnerability scanning of the production environment
• D) Penetration testing of the production environment
• E) Peer review prior to unit testing

---

Definitions:

Behavior Modification

A therapeutic approach focusing on changing maladaptive behaviors through reinforcement and other learning principles.

Client-Centered Therapy

A psychotherapeutic approach where the therapist provides support and guidance, allowing clients to explore and solve their problems in a non-directive manner.

Table Manners

The rules of etiquette used while eating, including the proper use of utensils, napkins, and how to conduct oneself at the dining table.

Modeling

A method of learning that involves observing and imitating the behavior of others, often discussed in the context of social learning theory.