CCSP · Question #57
Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?
The correct answer is C. Backdoors. In PaaS environments often used for software development, the creation of backdoors is a significant vulnerability, as developers might inadvertently or intentionally embed them.
Question
Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?
Options
- AMalware
- BLoss/theft of portable devices
- CBackdoors
- DDoS/DDoS
How the community answered
(47 responses)- A2% (1)
- C94% (44)
- D4% (2)
Why each option
In PaaS environments often used for software development, the creation of backdoors is a significant vulnerability, as developers might inadvertently or intentionally embed them.
Malware is a general threat across all computing environments, not a vulnerability specifically heightened or unique to PaaS software development in the way backdoors are.
Loss/theft of portable devices is a concern for endpoint security, not a direct vulnerability of the PaaS environment itself, which is cloud-based.
PaaS environments are frequently used by developers to build and deploy applications, and developers might intentionally or unintentionally include backdoors in the code or configuration during the development process. These backdoors could then be exploited to gain unauthorized access to the application or underlying infrastructure, posing a significant security risk unique to development-focused platforms.
DoS/DDoS attacks are network and application layer threats, but while a concern for any public-facing application, they are not a vulnerability inherent to PaaS software development itself in the same specific way backdoors are.
Concept tested: PaaS development environment vulnerabilities
Source: https://cloudsecurityalliance.org/research/top-threats/
Topics
Community Discussion
No community discussion yet for this question.