CAS-005 · Question #89
Recent repents indicate that a software tool is being exploited. Attackers were able to bypass user access controls and load a database. A security analyst needs to find the vulnerability and recommen
The correct answer is C. Removing hard coded credentials from the source code. The strings output reveals hard-coded credentials (admin dBl0ad3r!) within the dbloader.exe binary. Attackers can exploit these to bypass access controls. The analyst should recommend removing hard-coded credentials to mitigate this vulnerability.
Question
Recent repents indicate that a software tool is being exploited. Attackers were able to bypass user access controls and load a database. A security analyst needs to find the vulnerability and recommend a mitigation. The analyst generates the following output:
Which of the following would the analyst most likely recommend?
Exhibits
Options
- AInstalling appropriate EDR tools to block pass-the-hash attempts
- BAdding additional time to software development to perform fuzz testing
- CRemoving hard coded credentials from the source code
- DNot allowing users to change their local passwords
How the community answered
(45 responses)- A4% (2)
- B9% (4)
- C62% (28)
- D24% (11)
Explanation
The strings output reveals hard-coded credentials (admin dBl0ad3r!) within the dbloader.exe binary. Attackers can exploit these to bypass access controls. The analyst should recommend removing hard-coded credentials to mitigate this vulnerability.
Community Discussion
No community discussion yet for this question.