A software developer is correcting the error-handling capabilities of an application following the initial coding of the fix.
Which of the following would the software developer MOST likely performed to validate the code poor to pushing it to production?

• A.Web-application vulnerability scan
• B.Static analysis
• C.Packet inspection
• D.Penetration test

Comment: *

Name: *

Email: *

Verification: *

Several vulnerability scan reports have indicated runtime errors as the code is executing. The dashboard that lists the errors has a command-line interface for developers to check for vulnerabilities. Which of the following will enable a developer to correct this issue? (Select two).

• A.Performing dynamic application security testing
• B.Reviewing the code
• C.Fuzzing the application
• D.Debugging the code
• E.Implementing a coding standard
• F.Implementing IDS

Comment: *

Name: *

Email: *

Verification: *

A security analyst is responding to an indent that involves a malicious attack on a network. Data closet. Which of the following best explains how are analyst should properly document the incident?

• A.Create a full diagram of the network infrastructure
• B.Back up the configuration file for alt network devices
• C.Take photos of the impacted items
• D.Record and validate each connection

Comment: *

Name: *

Email: *

Verification: *

The security team reviews a web server for XSS and runs the following Nmap scan:

Which of the following most accurately describes the result of the scan?

• A.An output of characters > and " as the parameters used m the attempt
• B.The vulnerable parameter ID hccp://l72.31.15.2/1.php?id-2 and unfiltered characters returned
• C.The vulnerable parameter and unfiltered or encoded characters passed > and " as unsafe
• D.The vulnerable parameter and characters > and " with a reflected XSS attempt

Comment: *

Name: *

Email: *

Verification: *

A recent penetration test discovered that several employees were enticed to assist attackers by visiting specific websites and running downloaded files when prompted by phone calls. Which of the following would best address this issue?

• A.Increasing training and awareness for all staff
• B.Ensuring that malicious websites cannot be visited
• C.Blocking all scripts downloaded from the internet
• D.Disabling all staff members' ability to run downloaded applications

Comment: *

Name: *

Email: *

Verification: *