Isaca Certified Information Systems Auditor CISA Question # 189 Topic 19 Discussion
CISA Exam Topic 19 Question 189 Discussion:
Question #: 189
Topic #: 19
An IS auditor is assessing an organization ' s DevSecOps approach. Which of the following BEST indicates a proactive approach to identifying vulnerabilities?
A.
Integration of automated security testing tools into the continuous integration/continuous delivery (CI/CD) process
B.
Open-source dependency checks within continuous integration/continuous delivery (CI/CD) process
C.
Use of the most current development frameworks and libraries
D.
Post-implementation vulnerability scans on application deployments
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit