Practice · Certified Application Security Engineer (C|ASE .NET)

~/eccouncil-case-net · eccouncil-case-net_d1_77434e03a9d1 ▊

← Certified Application Security Engineer (C|ASE .NET) · practice sheet

eccouncil-case-net_d1_77434e03a9d1 domain/d1 · medium single

A software team argues that once their developers follow secure coding guidelines, the application is fully secure and no further activity is needed. According to the CASE program philosophy, why is this reasoning flawed?

A Secure coding alone challenges the traditional mindset; security must span the entire SDLC, including requirements, design, and post-development phases
B Secure coding guidelines only apply to Java, not to .NET applications
C Secure coding is unnecessary if the application uses a firewall
D Secure coding is only relevant during the deployment phase of the SDLC

Unlock this exam to join the per-question discussion and vote on questions.

next question →