As Part of an IoT Project, an Organization Is Developing

Multiple Choice

As part of an IoT project, an organization is developing an edge application that will run on a gateway to securely transmit sensor information it receives into an IoT cloud. Based on the Agile software development lifecycle, the development team is planning to implement a CI/CD pipeline. Which two methods should be suggested to make the software development lifecycle more secure during the implementation and testing? (Choose two.)

A) Perform automated code reviews prior to deployment.
B) Implement auto-provisioning security inspection for the code.
C) Perform on-going penetration testing on the system.
D) Perform a GAP analysis on current security activities and policies.
E) Train members of the team in a secure software development lifecycle methodology such as OWASP.