Exam CV0-003 topic 1 question 308 discussion

Before publishing a new application, ensuring security and compliance is critical. The two most important tests for security validation are Vulnerability Testing and Penetration Testing. 1️⃣ Vulnerability Testing (B) Scans the application for known security flaws (e.g., outdated libraries, misconfigurations, weak encryption). Uses automated tools like Nessus, Qualys, or OpenVAS. Ensures compliance with security standards like ISO 27001, NIST, or GDPR. 2️⃣ Penetration Testing (E) Simulates real-world attacks to identify exploitable security weaknesses. Uses ethical hacking techniques to test the application’s defenses. Helps assess how well the system can withstand attacks before it goes live.

B. Vulnerability testing E. Penetration testing Explanation: B. Vulnerability testing: This type of testing is essential to identify and address any security vulnerabilities within the application. It helps ensure the application is secure against known threats and meets security standards. E. Penetration testing: Penetration testing involves simulating attacks on the application to identify potential security weaknesses. It provides a comprehensive assessment of the application's security posture and helps ensure compliance with security standards.