nerdexam
(ISC)2

CCSP · Question #57

Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?

The correct answer is C. Backdoors. In PaaS environments often used for software development, the creation of backdoors is a significant vulnerability, as developers might inadvertently or intentionally embed them.

Submitted by sofia.br· Apr 18, 2026Cloud Application Security

Question

Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?

Options

  • AMalware
  • BLoss/theft of portable devices
  • CBackdoors
  • DDoS/DDoS

How the community answered

(47 responses)
  • A
    2% (1)
  • C
    94% (44)
  • D
    4% (2)

Why each option

In PaaS environments often used for software development, the creation of backdoors is a significant vulnerability, as developers might inadvertently or intentionally embed them.

AMalware

Malware is a general threat across all computing environments, not a vulnerability specifically heightened or unique to PaaS software development in the way backdoors are.

BLoss/theft of portable devices

Loss/theft of portable devices is a concern for endpoint security, not a direct vulnerability of the PaaS environment itself, which is cloud-based.

CBackdoorsCorrect

PaaS environments are frequently used by developers to build and deploy applications, and developers might intentionally or unintentionally include backdoors in the code or configuration during the development process. These backdoors could then be exploited to gain unauthorized access to the application or underlying infrastructure, posing a significant security risk unique to development-focused platforms.

DDoS/DDoS

DoS/DDoS attacks are network and application layer threats, but while a concern for any public-facing application, they are not a vulnerability inherent to PaaS software development itself in the same specific way backdoors are.

Concept tested: PaaS development environment vulnerabilities

Source: https://cloudsecurityalliance.org/research/top-threats/

Topics

#PaaS security#Application development security#Backdoors#Vulnerabilities

Community Discussion

No community discussion yet for this question.

Full CCSP Practice