Exam SY0-601 topic 1 question 319 discussion

Owasp should be correct

OWASP is a widely recognized and respected organization that focuses on web application security. They provide a wealth of information, tools, and resources for developers to enhance the security of their web applications. NIST CSF stands for the National Institute of Standards and Technology (NIST) Cybersecurity Framework, which is a framework for managing and reducing cybersecurity risks. While it provides valuable guidelines for overall cybersecurity, it may not specifically address secure coding practices for web applications.

Why not B?

Web = Owasp

Open Web Application Security Project Thankfully, application developers now have invaluable resources such as the Open Web Application Security Project (OWASP) to help them improve their application development techniques. OWASP describes itself as “a nonprofit foundation that works to improve the security of software. Through community-led open source software projects, hundreds of local chapters worldwide, tens of thousands of members, and leading educational and training conferences, the OWASP Foundation is the source for developers and technologists to secure the web.” One of the best resources that OWASP offers the new (and experienced) developer is the “Top 10 Web Application Security Risks” list, which not only lists the most common vulnerabilities but also provides detailed explanations of how they are exploited and how to prevent them through secure coding techniques." -Mike Meyers' Security+ Certification Passport SY0-601 by Dawn Dunkerley

The correct answer is A. OWASP. The Open Web Application Security Project (OWASP) is a community-driven organization that provides resources and guidance on web application security, including best practices for secure coding. OWASP offers a variety of resources for developers, including the OWASP Top Ten, a list of the most critical web application security risks, and the OWASP Secure Coding Practices - Quick Reference Guide. Option B, vulnerability scan results, can be a useful resource for identifying vulnerabilities in web applications, but it does not necessarily provide guidance on how to improve secure coding practices. Option C, NIST CSF, is a framework for improving cybersecurity risk management, but it is not specifically focused on secure coding practices for web applications. Option D, third-party libraries, are pre-existing code modules that can be integrated into a software application, but they do not necessarily provide guidance on secure coding practices.

A. OWASP (Open Web Application Security Project) is the BEST resource for a software developer who is looking to improve secure coding practices for web applications. OWASP is a non-profit organization that provides free and open resources for improving software security, including a comprehensive list of web application security risks, secure coding guidelines, and testing tools.

Agree on A

Owasp, easy ok

Easy, OWASP.

OWASP I agree