nerdexam
CompTIA

CAS-003 · Question #688

An application development company implements object reuse to reduce life-cycle costs for the company and its clients. Despite the overall cost savings, which of the following BEST describes a…

The correct answer is D. Homogeneous vulnerabilities will occur across multiple products. Object reuse means the same code components (libraries, modules, classes) are shared across multiple applications and products. While this reduces development cost, it creates a monoculture risk: if a vulnerability is discovered in a reused object, every product that…

Research, Development and Collaboration

Question

An application development company implements object reuse to reduce life-cycle costs for the company and its clients. Despite the overall cost savings, which of the following BEST describes a security risk to customers inherent within this model?

Options

  • AConfigurations of applications will affect multiple products.
  • BReverse engineering of applications will lead to intellectual property loss
  • CSoftware patch deployment will occur less often
  • DHomogeneous vulnerabilities will occur across multiple products

How the community answered

(23 responses)
  • A
    9% (2)
  • B
    4% (1)
  • D
    87% (20)

Explanation

Object reuse means the same code components (libraries, modules, classes) are shared across multiple applications and products. While this reduces development cost, it creates a monoculture risk: if a vulnerability is discovered in a reused object, every product that incorporates that object is equally vulnerable. This is called a homogeneous vulnerability. A single exploit can therefore compromise multiple products simultaneously, dramatically increasing the blast radius of any attack. Configuration affecting multiple products (A) is a management concern, not a direct security risk of reuse. IP loss through reverse engineering (B) is unrelated to code reuse. Reduced patching frequency (C) is not an inherent outcome of object reuse.

Topics

#object reuse#homogeneous vulnerabilities#SDLC security#software supply chain

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice