CAS-001 · Question #203
A company contracts with a third party to develop a new web application to process credit cards. Which of the following assessments will give the company the GREATEST level of assurance for the web…
The correct answer is D. Code Review. A Code Review provides the greatest level of assurance for a custom-developed application because it examines the actual source code for security vulnerabilities, logic flaws, hardcoded credentials, backdoors, and insecure coding practices before the application is deployed. It…
Question
A company contracts with a third party to develop a new web application to process credit cards. Which of the following assessments will give the company the GREATEST level of assurance for the web application?
Options
- ASocial Engineering
- BPenetration Test
- CVulnerability Assessment
- DCode Review
How the community answered
(39 responses)- A15% (6)
- B3% (1)
- C8% (3)
- D74% (29)
Explanation
A Code Review provides the greatest level of assurance for a custom-developed application because it examines the actual source code for security vulnerabilities, logic flaws, hardcoded credentials, backdoors, and insecure coding practices before the application is deployed. It catches root-cause defects that automated tools and black-box tests often miss. A Penetration Test exercises the running application but cannot see inside the code. A Vulnerability Assessment identifies known weaknesses but does not analyze custom logic. Social Engineering tests human behavior, not application code. For a credit card application where PCI DSS compliance and data protection are critical, code review is the most thorough and direct form of assurance.
Topics
Community Discussion
No community discussion yet for this question.