CAS-005 · Question #503
A security architect is performing threat-modeling activities related to an acquired overseas software company that will be integrated with existing products and systems. Once its software is…
The correct answer is C. Secure development process with gate checks and appropriate code scanning. The most significant threats listed (IDs 02 and 03) involve tampering with source code or third- party libraries, both rated as Critical. Implementing a secure development process with gate checks and code scanning directly mitigates these risks by detecting backdoors…
Question
A security architect is performing threat-modeling activities related to an acquired overseas software company that will be integrated with existing products and systems. Once its software is integrated, the software company will process customer data for the acquiring company. Given the following:
Which of the following mitigations would reduce the risk of the most significant threats?
Exhibits
Options
- APrivileged access management system with conditional access capabilities to prevent
- BRate-limiting capabilities on all authentication systems and leveraging single sign-on through
- CSecure development process with gate checks and appropriate code scanning
- DZero Trust architecture for all assets from the acquired company using microsegmentation
How the community answered
(28 responses)- A11% (3)
- B18% (5)
- C68% (19)
- D4% (1)
Explanation
The most significant threats listed (IDs 02 and 03) involve tampering with source code or third- party libraries, both rated as Critical. Implementing a secure development process with gate checks and code scanning directly mitigates these risks by detecting backdoors, malicious code, and integrity issues before integration.
Community Discussion
No community discussion yet for this question.