
Ultimate access to all questions.
In the context of creating an application lifecycle management process centered around the Microsoft Security Development Lifecycle (SDL), you are tasked with recommending a security standard for onboarding applications to Azure. This standard should encompass guidelines for the application's design, development, and deployment phases. Specifically, during the application design phase, what should be included? Note that threat modeling is a fundamental aspect of the Microsoft SDL. It is an engineering technique to identify threats, attacks, vulnerabilities, and countermeasures that could impact your application. Threat modeling can be utilized to shape your application's design, fulfill your organization's security objectives, and mitigate risks.
A
software decomposition by using Microsoft Visual Studio Enterprise
B
dynamic application security testing (DAST) by using Veracode
C
threat modeling by using the Microsoft Threat Modeling Tool
D
static application security testing (SAST) by using SonarQube