nerdexam
IBM

C2150-810 · Question #41

You are reviewing a banking application and find a lost sink method called performTransactionf...) that sends requested transaction information (bill payment, fundstransfer, etc) to the back-end…

The correct answer is D. Tainted Callback. See the full explanation below for the reasoning.

Question

You are reviewing a banking application and find a lost sink method called performTransactionf...) that sends requested transaction information (bill payment, fundstransfer, etc) to the back-end COBOL application running on IBM System z mainframe that actually moves the money. Which type of custom rule should you create for this method?

Options

  • ASink
  • BSource
  • CTaint Propagator
  • DTainted Callback
  • ENot Susceptible to taint

How the community answered

(46 responses)
  • A
    7% (3)
  • B
    4% (2)
  • C
    13% (6)
  • D
    74% (34)
  • E
    2% (1)

Community Discussion

No community discussion yet for this question.

Full C2150-810 Practice