The correct option is Across every layer of the software stack.

Performing source code analysis across every layer of the software stack ensures that you inspect application code, third party libraries, frameworks, middleware, and platform integration points. This broad scope reduces blind spots because vulnerabilities can originate in one layer and manifest through another, and the combined approach gives both breadth and depth of coverage.

During continuous integration pipeline scans is incomplete because CI scans are a valuable part of automated testing but they often focus on build artifacts and may not include exhaustive analysis of all layers or long lived dependencies.

Across the complete system level sounds broad but it can be too coarse because system level checks may miss layer specific code issues and library level weaknesses that only source analysis will reveal.

At the individual component level is useful for focused checks but it is too narrow on its own because it can miss interactions between components and vulnerabilities that arise at higher or lower layers of the stack.

Full AWS Practitioner Certification Question