CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

Question

Penetration testing (also known as pen testing) is the practice of evaluating a computer system, network, or web application to identify vulnerabilities that an attacker could exploit. Which of the following areas may be exploited during a penetration test? Each correct answer represents a complete solution. Choose all that apply.

Choose five

A Kernel flaws
B Information system architectures
C Race conditions
D File and directory permissions
E Buffer overflows
F Trojan horses

Explanation

Kernel flaws, insecure information-system architectures, race conditions, improper file and directory permissions, and buffer overflows can create exploitable weaknesses in a system. A Trojan horse is malware, not itself a vulnerability area that a penetration test exploits.

CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ109

Community Discussion