nerdexam
IBM

C2150-810 · Question #27

You are reviewing an on-line shopping application and find a lost sink method called retrieveOrderf...) that is provided by a third party shopping framework. This method accepts order number and in…

The correct answer is B. Source. See the full explanation below for the reasoning.

Question

You are reviewing an on-line shopping application and find a lost sink method called retrieveOrderf...) that is provided by a third party shopping framework. This method accepts order number and in turn provides all information regarding that order such as items ordered, shipping and billing address, payment type, etc . Which type of custom rule should you create for this method?

Options

  • ASink
  • BSource
  • CTaint Propagator
  • DTainted Callback
  • ENot Susceptible to Taint

How the community answered

(41 responses)
  • A
    7% (3)
  • B
    78% (32)
  • D
    2% (1)
  • E
    12% (5)

Community Discussion

No community discussion yet for this question.

Full C2150-810 Practice