A Development Team Releases Updates to an Application Regularly

Multiple Choice

A development team releases updates to an application regularly. The application is compiled with several standard, open-source security products that require a minimum version for compatibility. During the security review portion of the development cycle, which of the following should be done to minimize possible application vulnerabilities?

A) The developers should require an exact version of the open-source security products, preventing the introduction of new vulnerabilities.
B) The application development team should move to an Agile development approach to identify security concerns faster.
C) The change logs for the third-party libraries should be reviewed for security patches, which may need to be included in the release
D) The application should eliminate the use of open-source libraries and products to prevent known vulnerabilities from being included