Which of the following can be performed to find security design flaws in mobile apps prior to
writing code?

A.
Threat modeling

B.
Penetration testing

C.
Static source code analysis

D.
Dynamic validation testing

Explanation: