nerdexam
EC-Council

312-92 · Question #50

David is an applications developer working for Dewer and Sons law firm in Los Angeles David just completed a course on writing secure code and was enlightened by all the intricacies of how code must…

The correct answer is B. Change printf(argv[1]) to printf("%s", argv[1]). See the full explanation below for the reasoning.

Question

David is an applications developer working for Dewer and Sons law firm in Los Angeles David just completed a course on writing secure code and was enlightened by all the intricacies of how code must be rewritten many times to ensure its security. David decides to go through all the applications he has written and change them to be more secure. David comes across the following snippet in one of his programs:

#include <stdio.h> int main(int argc, char **argv) { int number = 5; printf(argv[1]); putchar(`\n'); printf("number (%p) is equal to %d\n", &value, value); } What could David change, add, or delete to make this code more secure?

Options

  • AChange putchar(\n') to putchar("%s", \n')
  • BChange printf(argv[1]) to printf("%s", argv[1])
  • CChange printf(argv[1]) to printf(constv [0])
  • DChange int number = 5 to const number = ""

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    82% (31)
  • C
    5% (2)
  • D
    11% (4)

Community Discussion

No community discussion yet for this question.

Full 312-92 Practice