A security administrator is assessing a new application. The application uses an API that is supposed to encrypt text strings that are stored in memory. How might the administrator test that the…

The correct answer is D. Initiate a core dump of the application. Applications store information in memory and this information include sensitive data, passwords, and usernames and encryption keys. Conducting memory/core dumping will allow you to analyze the memory content and then you can test that the strings are indeed encrypted.

Enterprise Security Operations

Question

A security administrator is assessing a new application. The application uses an API that is supposed to encrypt text strings that are stored in memory. How might the administrator test that the strings are indeed encrypted in memory?

Options

AUse fuzzing techniques to examine application inputs
BRun nmap to attach to application memory
CUse a packet analyzer to inspect the strings
DInitiate a core dump of the application
EUse an HTTP interceptor to capture the text strings

How the community answered

(28 responses)

A
7% (2)
C
4% (1)
D
79% (22)
E
11% (3)

Explanation

Applications store information in memory and this information include sensitive data, passwords, and usernames and encryption keys. Conducting memory/core dumping will allow you to analyze the memory content and then you can test that the strings are indeed encrypted.

Topics

#memory forensics#core dump#API encryption testing#application security

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice