CompTIA Security+ (SY0-701) SY0-701 — Question 306

A security analyst is reviewing the source code of an application in order to identify misconfigurations and vulnerabilities. Which of the following kinds of analysis best describes this review?