CA1-005: CompTIA SecurityXDemo

Question

During DAST scans, applications repeatedly report code defects in open-source libraries used to build web applications. Most defects result from libraries with known vulnerabilities, and these defects are delaying product deployments. Which of the following is the best way to identify these issues earlier in the life cycle?

A Directing application logs to the SIEM for continuous monitoring
B Modifying the WAF polices to block against known vulnerabilities
C Completing an IAST scan against the web application
D Using a software dependency management solution

Explanation

A software dependency management solution, typically using software composition analysis (SCA), identifies third-party and open-source dependencies and checks them for publicly disclosed vulnerabilities. Integrating this control earlier in development or CI/CD detects vulnerable library versions before DAST and deployment. OWASP describes Dependency-Check as an SCA tool that detects publicly disclosed vulnerabilities in project dependencies.

Learn more

CA1-005: CompTIA SecurityXDemo

AstroTutor

Notes

Readiness

QuestionQ56

Community Discussion