CAS-005 · Question #189
A security researcher tells a company that one of its solutions is vulnerable to buffer overflow, leading to a malicious coding execution. Which of the following is the best way to avoid this…
The correct answer is B. Using SAST tools to find vulnerabilities as part of the pipeline. Static Application Security Testing (SAST) tools analyze source code during development to detect vulnerabilities like buffer overflows early in the software development lifecycle, allowing for proactive mitigation before deployment.
Question
A security researcher tells a company that one of its solutions is vulnerable to buffer overflow, leading to a malicious coding execution. Which of the following is the best way to avoid this vulnerability in future versions?
Options
- ATesting for CSRF vulnerabilities before the application goes to production
- BUsing SAST tools to find vulnerabilities as part of the pipeline
- CImplementing canary protection in an earlier life-cycle stage
- DImplementing pair programming to improve development capabilities
How the community answered
(33 responses)- B94% (31)
- C3% (1)
- D3% (1)
Explanation
Static Application Security Testing (SAST) tools analyze source code during development to detect vulnerabilities like buffer overflows early in the software development lifecycle, allowing for proactive mitigation before deployment.
Community Discussion
No community discussion yet for this question.