Which step in the change management process includes modifying the source code? 

Using a web-based common vulnerability scoring system (CVSS) calculator, a security response team

member performed an assessment on a reported vulnerability in the company's claims intake component. The

base score of the vulnerability was 3.5 and changed to 5.9 after adjusting temporal and environmental metrics.

Which rating would CVSS assign this vulnerability?

Which secure coding best practice says to assume all incoming data should be considered untrusted and should be validated to ensure the system only accepts valid data?

Which software-testing technique can be automated or semi-automated and provides invalid, unexpected, or random data to the inputs of a computer software program?

Which type of security analysis is limited by the fact that a significant time investment of a highly skilled team member is required?