CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ159

VerifiedSecure Software Testing

Which of the following processes would you use to actively analyze a system for potential vulnerabilities that might result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in processes or technical countermeasures?

Explanation

Penetration testing actively attempts to identify and validate security weaknesses, including those caused by configuration faults, hardware or software flaws, and operational deployment weaknesses. It tests whether security controls can be circumvented or compromised.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!