Correct Answer: C. Decomposing the application. Threat modeling procedures commonly include decomposing the application to understand its components, data flows, trust boundaries, and attack surfaces. The OWASP Web Security Testing Guide incorporates structured analysis of application architecture as part of identifying and evaluating potential threats. Why The Other Options Are Incorrect A. Review of security requirements Reviewing security requirements is part of secure development lifecycle a

Web Application Security Assessment. Penetration Testing, And the Review & Reporting Process

Web Application Penetration Testing: Steps, Methods, & Tools | PurpleSec

Complete Zap Tutorial: How to Use OWASP ZAP for Web Application Security Testing

Web App Penetration Testing Tutorial with ZAP Proxy | How to Use ZAP Proxy for Security Testing

OWASP ZAP 01 Tutorial: Introduction to Security Testing with OWASP ZAP | Beginner's Guide