MDFT Academy Quizzes

Choose The Appropriate Security Tool For CI Phase

You work as a DevOps engineer at MDFT Academy, a well-known training agency. You have been tasked with strengthening the security of your team’s development process for the student management system.

You need to suggest a security tool type that can be integrated into the Continuous Integration (CI) phase of the development process.

Which of the following options would you suggest?

Choose the correct answer from the options below.

Explanations for each answer:

Penetration testing is incorrect. Penetration testing is typically performed on deployed applications in a testing or staging environment, making it more suitable for later stages of the development pipeline rather than the CI phase.
Static code analysis is correct.
Threat modeling is incorrect. Threat modeling is a proactive security activity performed during the design phase of development, before code is written, not during the CI phase.
Dynamic code analysis is incorrect. Dynamic code analysis requires a running application and is typically performed during the testing phase after deployment, not during the CI phase where code is just being integrated.

Exam Preparation Quiz

Choose The Appropriate Security Tool For CI Phase