Which of the Following Are Security Best Practices for Splunk

Which of the following are security best practices for Splunk app development? (Select all that apply.)

A) Store passwords in clear text in .conf files. Store passwords in clear text in .conf files.
B) Implement security in software development lifecycle.
C) Manually test application with the controls listed in the OWASP Security Testing Guide.
D) Use a dynamic scanner such as OWASP ZAP to scan web application components for vulnerabilities.