A new mobile application is being developed in-house. Security reviews did not pick up any major flaws, however vulnerability scanning results show fundamental issues at the very end of the project cycle. Which of the following security activities should also have been performed to discover vulnerabilities earlier in the lifecycle?A. Architecture review
B. Risk assessment
C. Protocol analysis
D. Code review

Option (D) is the correct answer of this question.

Explanation:

Code review is the security practices to find bugs earlier in the life cycle would have been done as well.

Code Review tends to be the process of collaborating progressively and frequently with one's  programmers to examine  another's script for flaws, as well as the other traditional software approach has been repeatedly demonstrated to simplify and standardize, because  the few certain approaches do.

Other options are incorrect because  they are not related to the code review.