Question 199

You are creating an application lifecycle management process based on the Microsoft Security Development Lifecycle (SDL). You need to recommend a security standard for onboarding applications to Azure. The standard will include recommendations for application design, development, and deployment. What should you include during the application design phase?

• Asoftware decomposition by using Microsoft Visual Studio Enterprise
• Bdynamic application security testing (DAST) by using Veracode
• Cthreat modeling by using the Microsoft Threat Modeling Tool
• Dstatic application security testing (SAST) by using SonarQube