CompTIA CASP+ (CAS-004) — Question 570

A startup software company recently updated its development strategy to incorporate the Software Development Life Cycle, including revamping the quality assurance and release processes for gold builds. Which of the following would most likely be developed FIRST as part of the overall strategy?

Answer options

• A. Security requirements
• B. Code signing
• C. Application vetting
• D. Secure coding standards

Correct answer: D

Explanation

Developing Secure coding standards is crucial as it sets the foundation for writing secure software from the start. Without these standards, the subsequent processes like code signing and application vetting could be compromised by vulnerabilities. Security requirements, while important, come after establishing the coding standards to ensure they align with the security framework.