nerdexam
IBM

C2150-810 · Question #22

You are reviewing an on-line shopping application and find a lost sink method called generateltemNotFoundMessage() provided by a third-party shopping framework. This method returns a search string…

The correct answer is B. Source. See the full explanation below for the reasoning.

Question

You are reviewing an on-line shopping application and find a lost sink method called generateltemNotFoundMessage() provided by a third-party shopping framework. This method returns a search string that was passed in. prepended with an "item not found" message in English, French or Spanish (depending on user's selection). Which type of custom rule do you need to create for this method?

Options

  • ASink
  • BSource
  • CTaint Propagator
  • DTainted Callback
  • ENot Susceptible to Taint

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    84% (47)
  • C
    9% (5)
  • D
    2% (1)
  • E
    2% (1)

Community Discussion

No community discussion yet for this question.

Full C2150-810 Practice