IBM
C2150-810 · Question #41
You are reviewing a banking application and find a lost sink method called performTransactionf...) that sends requested transaction information (bill payment, fundstransfer, etc) to the back-end…
The correct answer is D. Tainted Callback. See the full explanation below for the reasoning.
Question
You are reviewing a banking application and find a lost sink method called performTransactionf...) that sends requested transaction information (bill payment, fundstransfer, etc) to the back-end COBOL application running on IBM System z mainframe that actually moves the money. Which type of custom rule should you create for this method?
Options
- ASink
- BSource
- CTaint Propagator
- DTainted Callback
- ENot Susceptible to taint
How the community answered
(46 responses)- A7% (3)
- B4% (2)
- C13% (6)
- D74% (34)
- E2% (1)
Community Discussion
No community discussion yet for this question.