CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 11

Secure Application Development, Deployment, and Automation

This chapter covers the following official Security+ exam objective:

• ▶ 2.3 Summarize secure application development, deployment, and automation concepts.

Essential Terms and Components

• ▶ application environment

• ▶ provisioning

• ▶ deprovisioning

• ▶ integrity measurement

• ▶ secure coding

• ▶ normalization

• ▶ stored procedure

• ▶ obfuscation

• ▶ camouflage

• ▶ code reuse

• ▶ dead code

• ▶ server-side validation

• ▶ client-side validation

• ▶ data exposure

• ▶ memory management

• ▶ automation

• ▶ scripting

• ▶ continuous integration and continuous delivery (CI/CD)

• ▶ Open Web Application Security Project (OWASP)

• ▶ elasticity

• ▶ scalability

Application Environment

Organizations that develop software ...