Question

When should you perform a security design review?

a) During the code review stage of vulnerability assessment
b) During the baseline review period
c) Before taking any risk-mitigating actions
d) Before a security implementation is applied

Answer 1

A security design review should be performed before a security implementation is applied in order to identify and correct any flaws or weaknesses in the design.

Step-by-step explanation:

A security design review should be performed before a security implementation is applied. This helps to ensure that the design of the security measures is solid and effective before they are implemented. By conducting a security design review prior to implementation, any flaws or weaknesses in the design can be identified and corrected, reducing the risk of vulnerabilities in the final product.