312-50V11 · Question #375
The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?
The correct answer is B. A list of flaws and how to fix them. OWASP's primary contribution to web application security is a curated, publicly available list of common vulnerabilities along with guidance on how to remediate each one.
Question
The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?
Options
- AAn extensible security framework named COBIT
- BA list of flaws and how to fix them
- CWeb application patches
- DA security certification for hardened web applications
How the community answered
(28 responses)- A7% (2)
- B89% (25)
- D4% (1)
Why each option
OWASP's primary contribution to web application security is a curated, publicly available list of common vulnerabilities along with guidance on how to remediate each one.
COBIT is a governance framework published by ISACA, not OWASP; OWASP does not maintain COBIT or any framework by that name.
OWASP publishes resources such as the OWASP Top 10 and the Web Security Testing Guide that enumerate specific web application flaws - such as injection, broken authentication, and XSS - and provide developers and testers with concrete remediation steps. This knowledge base is the core service OWASP offers to the security community.
OWASP does not develop or distribute patches for web applications; patching is the responsibility of individual software vendors and development teams.
OWASP does not issue security certifications for hardened web applications; it is an open, non-profit community that produces documentation and tools, not a certifying body.
Concept tested: OWASP purpose and primary deliverables
Source: https://owasp.org/www-project-top-ten/
Topics
Community Discussion
No community discussion yet for this question.