Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CISSP All Questions

View all questions & answers for the CISSP exam

Exam CISSP topic 1 question 25 discussion

Actual exam question from ISC's CISSP
Question #: 25
Topic #: 1
[All CISSP Questions]

Which of the following is the BEST method to validate secure coding techniques against injection and overflow attacks?

  • A. Scheduled team review of coding style and techniques for vulnerability patterns
  • B. The regular use of production code routines from similar applications already in use
  • C. Using automated programs to test for the latest known vulnerability patterns
  • D. Ensure code editing tools are updated against known vulnerability patterns
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
somsom
1 month, 1 week ago
Answer is A. conduct a team review to discus about patterns for code review. in CISSP you think like a manager not like and analyst
upvoted 1 times
...
Vasyamba1
8 months, 2 weeks ago
Selected Answer: A
We are asking to validate coding techniques, not to scan our code for vulnerabilities.
upvoted 1 times
...
Soleandheel
11 months, 3 weeks ago
C. Using automated programs to test for the latest known vulnerability patterns.....security testing tools like dynamic and static analysis are automated and can help detect injection attacks and buffer overflow attacks among others.
upvoted 2 times
...
vorozco
1 year, 5 months ago
Selected Answer: C
C is correct. It's the BEST option because it's automated. I'm thinking of something like a SonarQube scan which provides code hotspots to be reviewed. I would say it's NOT option A because code can get longggg and really complex. Having a team of people review coding styles and techniques against injection and overflow attacks would take a long time. If anything, the team could get together and review the results from the automated program (making option C necessary FIRST, for option A to be more beneficial).
upvoted 2 times
...
BLADESWIFTKNIFE
1 year, 6 months ago
Selected Answer: A
I thought we would have to think like a manager. Wouldn't it be "Scheduled team review of coding style and techniques for vulnerability patterns." Since scheduling would be the indicator for manager resposibilities.
upvoted 2 times
dumdada
1 year, 5 months ago
As a manager you wouldnt want your team to spend their time doing manual reviews that can automated using the right tools.
upvoted 2 times
...
...
NodummyIQ
1 year, 9 months ago
Why it is not Option C, "Using automated programs to test for the latest known vulnerability patterns," is a useful method for identifying potential security vulnerabilities in code, but it is not the best method for validating secure coding techniques against injection and overflow attacks. Automated programs can only detect known vulnerabilities, and may not be able to identify new or unknown injection or overflow attacks. A combination of automated testing and human review, such as in option A, is often considered the best method for identifying and mitigating these types of attacks.
upvoted 1 times
jackdryan
1 year, 7 months ago
C is correct
upvoted 2 times
...
...
rootic
2 years ago
Selected Answer: C
Agree with C.
upvoted 2 times
...
Eltooth
2 years ago
Selected Answer: C
C is correct answer. Application pentest.
upvoted 2 times
...
franbarpro
2 years, 2 months ago
Selected Answer: C
Agree with "C" I thought A first... but application pentesting can get expensive fast and human makes mistakes.
upvoted 3 times
Nickolos
2 years, 2 months ago
It might be expensive, but the question asks for 'best', not 'most efficient' or 'cost effective'
upvoted 6 times
...
dev46
2 years, 2 months ago
yeah, B and D are easy to eliminate but A and C both sound right. But, with A, a human would not be updated with the latest vulnerability all the time. Hence, the automation sound right.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...