CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 1436


Which type of testing is used to identify security vulnerabilities in source code in the development environment?

Show Answer
Correct Answer:

Discussion

1 comment
Sign in to comment
46080f2Option: C
Mar 3, 2025

Based on this analysis, Static analysis security testing (SAST) (Option C) is the most appropriate choice. It directly analyzes the source code in the development environment, enabling developers to detect and fix security vulnerabilities early in the process.