Câu 77: CAS-005: CompTIA SecurityX

A security researcher tells a company that one of its solutions is vulnerable to buffer overflow, leading to a malicious coding execution. Which of the following is the best way to avoid this vulnerability in future versions?

1. A. Testing for CSRF vulnerabilities before the application goes to production
2. B. Using SAST tools to find vulnerabilities as part of the pipeline — đáp án hiện tại
3. C. Implementing canary protection in an earlier life-cycle stage
4. D. Implementing pair programming to improve development capabilities