QA Fundamentals · Senior · Question 35 of 76
How should security testing fit into a delivery process?
- 1Throughout: threat modelling, automated scans and expert testing
- 2Only as a penetration test once a year before audits
- 3Only after a breach has happened in production
Show the answer
Correct answer: Throughout: threat modelling, automated scans and expert testing
Explanation
Shifting security left (threat models in design, SAST and dependency scans in CI) and periodic expert testing find issues at different stages.