CAS-003 · Question #625
Users have reported that an internally developed web application is acting erratically, and the response output is inconsistent. The issue began after a web application dependency patch was applied…
The correct answer is A. Fuzzer. After a dependency patch, the application produces inconsistent, erratic response output - suggesting a regression or behavioral change introduced by the updated library. A fuzzer systematically generates a large volume of varied, unexpected, and boundary-case inputs and…
Question
Users have reported that an internally developed web application is acting erratically, and the response output is inconsistent. The issue began after a web application dependency patch was applied to improve security. Which of the following would be the MOST appropriate tool to help identify the issue?
Options
- AFuzzer
- BSCAP scanner
- CVulnerability scanner
- DHTTP interceptor
How the community answered
(45 responses)- A82% (37)
- B2% (1)
- C11% (5)
- D4% (2)
Explanation
After a dependency patch, the application produces inconsistent, erratic response output - suggesting a regression or behavioral change introduced by the updated library. A fuzzer systematically generates a large volume of varied, unexpected, and boundary-case inputs and observes how the application responds. This is effective for surfacing non-deterministic or inconsistent behavior introduced by the patch, since it exercises many code paths and reveals which inputs now produce anomalous outputs. Option B (SCAP scanner) assesses configuration compliance, not application behavior. Option C (vulnerability scanner) looks for known CVEs, not behavioral regressions. Option D (HTTP interceptor) is useful for inspecting specific individual requests but lacks the automated, broad input-variation capability needed to systematically identify inconsistent response patterns across many scenarios.
Topics
Community Discussion
No community discussion yet for this question.