CAS-003 · Question #688
An application development company implements object reuse to reduce life-cycle costs for the company and its clients. Despite the overall cost savings, which of the following BEST describes a…
The correct answer is D. Homogeneous vulnerabilities will occur across multiple products. Object reuse means the same code components (libraries, modules, classes) are shared across multiple applications and products. While this reduces development cost, it creates a monoculture risk: if a vulnerability is discovered in a reused object, every product that…
Question
An application development company implements object reuse to reduce life-cycle costs for the company and its clients. Despite the overall cost savings, which of the following BEST describes a security risk to customers inherent within this model?
Options
- AConfigurations of applications will affect multiple products.
- BReverse engineering of applications will lead to intellectual property loss
- CSoftware patch deployment will occur less often
- DHomogeneous vulnerabilities will occur across multiple products
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- D87% (20)
Explanation
Object reuse means the same code components (libraries, modules, classes) are shared across multiple applications and products. While this reduces development cost, it creates a monoculture risk: if a vulnerability is discovered in a reused object, every product that incorporates that object is equally vulnerable. This is called a homogeneous vulnerability. A single exploit can therefore compromise multiple products simultaneously, dramatically increasing the blast radius of any attack. Configuration affecting multiple products (A) is a management concern, not a direct security risk of reuse. IP loss through reverse engineering (B) is unrelated to code reuse. Reduced patching frequency (C) is not an inherent outcome of object reuse.
Topics
Community Discussion
No community discussion yet for this question.