Which of the following security activities should be performed to provide an appropriate level of security testing coverage?

An online banking application has had its source code updated and is soon to be re-launched. The underlying infrastructure has not been changed. In order to ensure that the application has an appropriate security posture, several security-related activities are required.

Which of the following security activities should be performed to provide an appropriate level of security testing coverage? (Select TWO).
A . Penetration test across the application with accounts of varying access levels (i.e. non-authenticated, authenticated, and administrative users).
B . Code review across critical modules to ensure that security defects, Trojans, and backdoors are not present.
C . Vulnerability assessment across all of the online banking servers to ascertain host and container configuration lock-down and patch levels.
D . Fingerprinting across all of the online banking servers to ascertain open ports and services.
E . Black box code review across the entire code base to ensure that there are no security defects present.

View Answer

Answer: A,B