2d • 🙋♂️ CISSP
CISSP Practice Question (Domain 8: Software Development Security)
A bank's mobile team wants a partner's analytics SDK in next week's release. The contract is signed, the SDK is compiled, and nobody knows what data it sends. What should the security manager do FIRST?
A. Demand the SDK source code from the partner
B. Assess the SDK's data flows and risk against policy
C. Capture the SDK's network traffic in dynamic testing
D. Hold the release until the partner passes a security audit
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
3
10 comments
CISSP Practice Question (Domain 8: Software Development Security)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+34
2
+32
3
+31
4
+28
5
+23
Powered by