CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ159

Secure Software Testing

Which of the following processes would you use to actively analyze a system for potential vulnerabilities that might result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in processes or technical countermeasures?

  • A Penetration testing
  • B Baselining
  • C Risk analysis
  • D Compliance checking
Explanation

Penetration testing actively attempts to identify and validate security weaknesses, including those caused by configuration faults, hardware or software flaws, and operational deployment weaknesses. It tests whether security controls can be circumvented or compromised.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!