Question $9$

A security analyst evaluates a software application's codebase to detect potential security

vulnerabilities. The analyst performs dynamic security testing and static source code analysis

to understand potential threats comprehensively. When conducting dynamic security testing

and static source code analysis, the analyst typically performs which activities? $($Select the

two best options.$)$

Analyzing run$-$time behavior of applications

Configuring firewall rules

Installing updates on network routers

Revicwing code for hard$-$coded credentials