A Development Team Releases Updates to an Application Regularly

question 62

Multiple Choice

A development team releases updates to an application regularly. The application is compiled with several standard, open-source security products that require a minimum version for compatibility. During the security review portion of the development cycle, which of the following should be done to minimize possible application vulnerabilities?

• A) The developers should require an exact version of the open-source security products, preventing the introduction of new vulnerabilities.
• B) The application development team should move to an Agile development approach to identify security concerns faster.
• C) The change logs for the third-party libraries should be reviewed for security patches, which may need to be included in the release
• D) The application should eliminate the use of open-source libraries and products to prevent known vulnerabilities from being included

---

Definitions:

Required Reserve Ratio

The fraction of deposits that banks are legally mandated to keep as reserves and not lend out.

Excess Reserves

The reserves held by financial institutions in excess of the minimum reserve requirements set by central banks; these are not used for lending and can influence the money supply.

Commercial Banks

Financial institutions that provide services such as accepting deposits, providing business and personal loans, and offering basic investment products.

Required Reserves

The minimum amount of funds that a bank must hold in reserve against deposit liabilities, as mandated by central banking authorities.