Câu 43: CAS-002: CompTIA Advanced Security Practitioner (CASP)

A security firm is writing a response to an RFP from a customer that is building a new network based software product. The firms expertise is in penetration testing corporate networks. The RFP explicitly calls for all possible behaviors of the product to be tested, however, it does not specify any particular method to achieve this goal. Which of the following should be used to ensure the security and functionality of the product? (Select TWO).

1. A. Code review — đáp án hiện tại
2. B. Penetration testing
3. C. Grey box testing
4. D. Code signing
5. E. White box testing — đáp án hiện tại