GSLC-2020: GIAC Security LeadershipDemo

Question

You are responsible for security at a company that relies heavily on web applications. You are particularly concerned that application flaws could allow an attacker to gain access to your network. Which method would be best for identifying those flaws?

A Automated penetration testing
B Code review
C Manual penetration testing
D Vulnerability scanning

Explanation

Manual penetration testing evaluates web applications as an attacker would, including business-logic weaknesses, authorization flaws, and combinations of issues that may enable network access. It provides broader assessment of real-world exploitability than automated testing or vulnerability scanning alone.

GSLC-2020: GIAC Security LeadershipDemo

AstroTutor

Notes

Readiness

QuestionQ8

Community Discussion