Which of the following is a security concern with deploying COTS products within the network?

Question

Options

• AIt is difficult to verify the security of COTS code because the source is available to the customer and
• BCOTS software often provides the source code as part of the licensing agreement and it becomes the
• CIt is difficult to verify the security of COTS code because the source is not available to the customer in
• DCOTS source code is readily available to the customer in many cases which opens the customer's

• A
  2% (1)
• B
  2% (1)
• C
  93% (51)
• D
  4% (2)

Explanation

With most COTS products, the vendor ships only compiled binaries and does not provide access to the underlying source code. Without source code, the customer cannot conduct a thorough code review or security audit to identify vulnerabilities, back doors, or insecure coding practices. The organization must trust the vendor's security assurances. This lack of transparency is a fundamental security concern-organizations cannot independently verify what the software is actually doing or whether it meets their security requirements.

No community discussion yet for this question.