CAS-005 · Question #156
During DAST scanning, applications are consistently reporting code defects in open-source libraries that were used to build web applications. Most of the code defects are from using libraries with kno
The correct answer is D. Using a software dependency management solution. Using a software dependency management solution helps track and manage open-source libraries and their vulnerabilities. This solution can identify vulnerable libraries early in the development process, allowing developers to replace or patch them before deployment and reducing de
Question
During DAST scanning, applications are consistently reporting code defects in open-source libraries that were used to build web applications. Most of the code defects are from using libraries with known vulnerabilities. The code defects are causing product deployment delays. Which of the following is the best way to uncover these issues earlier in the life cycle?
Options
- ADirecting application logs to the SIEM for continuous monitoring
- BModifying the WAF polices to block against known vulnerabilities
- CCompleting an IAST scan against the web application
- DUsing a software dependency management solution
How the community answered
(30 responses)- A13% (4)
- B3% (1)
- C7% (2)
- D77% (23)
Explanation
Using a software dependency management solution helps track and manage open-source libraries and their vulnerabilities. This solution can identify vulnerable libraries early in the development process, allowing developers to replace or patch them before deployment and reducing delays caused by code defects.
Community Discussion
No community discussion yet for this question.