CAS-002 · Question #12
A company contracts with a third party to develop a new web application to process credit cards. Which of the following assessments will give the company the GREATEST level of assurance for the web…
The correct answer is D. Code Review. A code review provides the greatest level of assurance for a custom-developed application because it examines the actual source code for logic flaws, insecure coding practices, improper input validation, and vulnerabilities that dynamic testing cannot reliably detect. Since the…
Question
A company contracts with a third party to develop a new web application to process credit cards. Which of the following assessments will give the company the GREATEST level of assurance for the web application?
Options
- ASocial Engineering
- BPenetration Test
- CVulnerability Assessment
- DCode Review
How the community answered
(50 responses)- A4% (2)
- B2% (1)
- C12% (6)
- D82% (41)
Explanation
A code review provides the greatest level of assurance for a custom-developed application because it examines the actual source code for logic flaws, insecure coding practices, improper input validation, and vulnerabilities that dynamic testing cannot reliably detect. Since the application is being built by a third party, reviewing the code ensures security is baked in rather than bolted on. A penetration test (B) tests the running application but cannot see hidden logic flaws or backdoors without source access. A vulnerability assessment (C) relies on known vulnerability signatures and misses custom code flaws. Social engineering (A) tests human targets, not the application itself.
Topics
Community Discussion
No community discussion yet for this question.