What are people-intensive verification techniques that are conducted either formally or informally that allow peers to read code statements and look for common security vulnerabilities, such as hard-coded IDs or passwords,and general quality features?
A) Code scanners
B) Code Reviews
C) Load testers
D) Fuzzing

Question

Quizplus · Accepted Answer

Code reviews involve peers reading through the code and looking for common security vulnerabilities and general quality issues. Code scanners, load testers, and fuzzing are automated techniques and do not involve human review.

What Are People-Intensive Verification Techniques That Are Conducted Either Formally