CAS-003 · Question #670
A small firm's newly created website has several design flaws. The developer created the website to be fully compatible with ActiveX scripts in order to use various digital certificates and trusting…
The correct answer is A. The developer inadvertently used Java applets. ActiveX controls run outside any sandbox and have direct, unrestricted access to the host OS and file system by design - sandboxing is not a feature of ActiveX. Java applets, by contrast, run inside the Java Virtual Machine's security sandbox, which restricts access to local…
Question
A small firm's newly created website has several design flaws. The developer created the website to be fully compatible with ActiveX scripts in order to use various digital certificates and trusting certificate authorities. However, vulnerability testing indicates sandboxes were enabled, which restricts the code's access to resources within the user's computer. Which of the following is the MOST likely cause of the error"?
Options
- AThe developer inadvertently used Java applets.
- BThe developer established a corporate account with a non-reputable certification authority.
- CThe developer used fuzzy logic to determine how the web browser would respond once ports 80
- DThe developer did not consider that mobile code would be transmitted across the network.
How the community answered
(32 responses)- A75% (24)
- B6% (2)
- C3% (1)
- D16% (5)
Explanation
ActiveX controls run outside any sandbox and have direct, unrestricted access to the host OS and file system by design - sandboxing is not a feature of ActiveX. Java applets, by contrast, run inside the Java Virtual Machine's security sandbox, which restricts access to local system resources by default. If the developer intended to use ActiveX but inadvertently used Java applets instead, the sandbox behavior observed during testing would be the natural result. This is the most likely explanation for why code designed to work without sandbox restrictions is being sandboxed and denied access to computer resources.
Topics
Community Discussion
No community discussion yet for this question.