CDP Secure Software Development Lifecycle Flashcards

Interactive Application Security Testing (IAST) works by:

Answer: Instrumenting the application at runtime to detect vulnerabilities during normal testing

IAST agents embedded inside the running application observe code execution during tests and report vulnerabilities with precise file and line context.

A Software Bill of Materials (SBOM) is important in DevSecOps because it:

Answer: Provides a complete inventory of software components and their versions for vulnerability tracking

An SBOM gives organizations visibility into every component in their software supply chain, enabling rapid response when new CVEs are disclosed.

Fuzz testing (fuzzing) is best described as:

Answer: Sending random or malformed inputs to an application to uncover unexpected behavior

Fuzzing automatically generates unexpected inputs to trigger crashes, hangs, or security exceptions that reveal hidden vulnerabilities.

Which SDLC artifact is most useful for ensuring a security review has been completed before release?

Answer: Security sign-off checklist or security review record

A formal security review record or sign-off checklist documents that all required security checks were performed and approved before release.

Dependency pinning in package management is a security best practice because it:

Answer: Prevents unexpected updates that could introduce vulnerabilities or supply-chain attacks

Pinning dependencies to exact versions ensures builds are reproducible and prevents a compromised package update from silently entering the build.

Security regression testing in CI/CD is intended to:

Answer: Verify that previously fixed vulnerabilities have not been reintroduced

Regression tests for security ensure that code changes do not accidentally reopen vulnerabilities that were previously remediated.