開発チームのマネージャーは、一般的な一連の脆弱性を示すレポートについて懸念しています。この一連の脆弱性は、チームが開発したほぼすべてのアプリケーションに存在します。マネージャがこの問題に対処するために使用する最も効果的なアプローチは、次のうちどれですか?
正解:B
Explanation
Invest in secure coding training and application security guidelines is the most effective approach for the manager to use to address the issue of common vulnerabilities in the applications developed by the team.
Secure coding training can help the developers learn how to write code that follows security best practices and avoids common mistakes or flaws that can introduce vulnerabilities. Application security guidelines can provide a set of standards and rules for developing secure applications that meet the company's security requirements and policies. By investing in secure coding training and application security guidelines, the manager can improve the security awareness and skills of the development team and reduce the number of vulnerabilities in their applications. References: 1 CompTIA Security+ Certification Exam Objectives, page 9, Domain 2.0: Architecture and Design, Objective 2.3: Summarize secure application development, deployment, and automation concepts 2 CompTIA Security+ Certification Exam Objectives, page 10, Domain 2.0:
Architecture and Design, Objective 2.4: Explain the importance of embedded and specialized systems security
3 https://www.comptia.org/blog/what-is-secure-coding