CAS-005 · Question #258
A security engineer must resolve a vulnerability in a deprecated version of Python for a custom- developed flight simulation application that is monitored and controlled remotely. The source code is…
The correct answer is A. Configure code-signing within the CI/CD pipeline, update Python with aptitude, and update. Code-signing within the CI/CD pipeline ensures that only verified and signed code is deployed, mitigating the risk of supply chain attacks. Updating Python with aptitude and updating modules with pip ensures vulnerabilities are patched. Deploying the solution to production…
Question
A security engineer must resolve a vulnerability in a deprecated version of Python for a custom- developed flight simulation application that is monitored and controlled remotely. The source code is proprietary and built with Python functions running on the Ubuntu operating system. Version control is not enabled for the application in development or production. However, the application must remain online in the production environment using built-in features. Which of the following solutions best reduces the attack surface of these issues and meets the outlined requirements?
Options
- AConfigure code-signing within the CI/CD pipeline, update Python with aptitude, and update
- BEnable branch protection in the GitHub repository. Update Python with aptitude, and update
- CUse an NFS network share. Update Python with aptitude, and update modules with pip in a test
- DConfigure version designation within the Python interpreter. Update Python with aptitude, and
How the community answered
(23 responses)- A65% (15)
- B22% (5)
- C4% (1)
- D9% (2)
Explanation
Code-signing within the CI/CD pipeline ensures that only verified and signed code is deployed, mitigating the risk of supply chain attacks. Updating Python with aptitude and updating modules with pip ensures vulnerabilities are patched. Deploying the solution to production after testing maintains application availability while securing the development lifecycle.
Community Discussion
No community discussion yet for this question.