Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Quarterly SDLC (Software Development Life Cycle) training focused on the top vulnerabilities helps developers understand secure coding practices and how to avoid common security issues such as those outlined in the OWASP Top Ten. Regular training ensures that developers stay up to date with the latest threats and best practices, directly addressing the audit's concern about awareness.
Given the options, A sounds like the most logical solution to the situation.
A) quarterly SDLC training SDLC = software development lifecycle. The devs don't have the best coding practices to avoid vulnerabilities because they are not trained enough, nor aware of it. Regular training can mitigate this risk.