What should you include during the application design phase?

You are creating an application lifecycle management process based on the Microsoft Security Development Lifecycle (SDL).

You need to recommend a security standard for onboarding applications to Azure. The standard will include recommendations for application design, development, and deployment.

What should you include during the application design phase?
A . static application security testing (SAST) by using SonarQube
B . dynamic application security testing (DAST) by using Veracode
C . threat modeling by using the Microsoft Threat Modeling Tool
D . software decomposition by using Microsoft Visual Studio Enterprise

Answer: C

Explanation:

https://www.microsoft.com/en-us/securityengineering/sdl/threatmodeling