exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam

Exam CS0-003 topic 1 question 373 discussion

Actual exam question from CompTIA's CS0-003
Question #: 373
Topic #: 1
[All CS0-003 Questions]

A company’s internet-facing web application has been compromised several times due to identified design flaws. The company would like to minimize the risk of these incidents from reoccurring and has provided the developers with better security training. However, the company cannot allocate any more internal resources to the issue. Which of the following are the best options to help identify flaws within the system? (Choose two.)

  • A. Deploying a WAF
  • B. Performing a forensic analysis
  • C. Contracting a penetration test
  • D. Holding a tabletop exercise
  • E. Creating a bug bounty program
  • F. Implementing threat modeling
Show Suggested Answer Hide Answer
Suggested Answer: CE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
donjuanx
5 days, 3 hours ago
Selected Answer: CE
Keyword is the company can not spare anymore internal resources. Thus making creating a bug bounty program and having an external company conduct a penetration test the only answers that involve not using internal resources.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago