nerdexam
CompTIA

CAS-005 · Question #277

An external SaaS solution user reports a bug associated with the role-based access control module. This bug allows users to bypass system logic associated with client segmentation in the multitenant…

The correct answer is A. Regression testing. Regression testing is a software testing practice that ensures that recent code changes have not adversely affected existing functionalities. In this scenario, the reintroduction of a previously fixed bug indicates that changes or integrations brought back the old issue…

Submitted by chen.hong· Mar 6, 2026Security Engineering

Question

An external SaaS solution user reports a bug associated with the role-based access control module. This bug allows users to bypass system logic associated with client segmentation in the multitenant deployment model. When assessing the bug report, the developer finds that the same bug was previously identified and addressed in an earlier release. The developer then determines the bug was reintroduced when an existing software component was integrated from a prior version of the platform. Which of the following is the best way to prevent this scenario?

Options

  • ARegression testing
  • BCode signing
  • CAutomated test and retest
  • DUser acceptance testing
  • ESoftware composition analysis

How the community answered

(43 responses)
  • A
    84% (36)
  • B
    9% (4)
  • C
    5% (2)
  • E
    2% (1)

Explanation

Regression testing is a software testing practice that ensures that recent code changes have not adversely affected existing functionalities. In this scenario, the reintroduction of a previously fixed bug indicates that changes or integrations brought back the old issue. Implementing comprehensive regression testing would help detect such reintroductions by systematically retesting the existing functionalities whenever changes are made to the codebase. This practice is crucial in maintaining the integrity of the application, especially in complex systems where multiple components interact.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice