Câu 18: 312-97: Certified DevSecOps Engineer (ECDE)

Craig Kelly has been working as a software development team leader in an IT company over the past 8 years. His team is working on the development of an Android application product. Sandra Oliver, a DevSecOps engineer, used DAST tools and fuzz testing to perform advanced checks on the Android application product and detected critical and high severity issues. She provided the information about the security issues and the recommendations to mitigate them to Craig’s team. Which type of security checks performed by Sandra involve detection of critical and high severity issues using DAST tools and fuzz testing?

1. A. Deploy-time checks
2. B. Commit-time checks
3. C. Test-time checks — đáp án hiện tại
4. D. Build-time checks