137k views
0 votes
A software development company lost customers recently because of a large number of software issues. These issues were related to integrity and availability defects, including buffer overflows, pointer dereferences, and others.

Which of the following should the company implement to improve code quality? (Choose two.)

A. Development environment access controls
B. Continuous integration
C. Code comments and documentation
D. Static analysis tools
E. Application containerization
F. Code obfuscation

1 Answer

4 votes

Final answer:

The software development company can improve code quality by implementing Continuous integration and Static analysis tools to alleviate the integrity and availability defects that have led to the loss of customers.

Step-by-step explanation:

To improve code quality and address software development issues that have caused the loss of customers recently, the software development company should consider implementing the following two practices from those listed:

Continuous integration: This practice allows for the automated testing of code changes in a shared repository multiple times a day. It helps in catching defects early in the development process, thereby reducing the number of integrity and availability issues such as buffer overflows and pointer dereferences. Continuous integration ensures that software builds remain in a state that can be released at any time, improving the reliability and stability of the software products.

Static analysis tools: These tools can automatically scan and analyze the code for potential errors without executing the program. Static analysis helps in identifying common coding mistakes and vulnerabilities like those mentioned at a very early stage. By integrating static analysis tools into the development cycle, the company can preemptively address issues that might lead to the software defects affecting their clients and thereby improve the overall quality of the code.

While the other options listed may have their benefits, they do not directly address the specific issues of code quality in terms of integrity and availability defects as effectively as continuous integration and static analysis tools do.

User CanCeylan
by
8.7k points