nerdexam
CompTIA

CS0-003 · Question #77

A company's application development has been outsourced to a third-party development team. Based on the SLA, the development team must follow industry best practices for secure coding. Which of the fo

The correct answer is C. Application fuzzing. Threat actors use fuzzing to find zero-day exploits - this is known as a fuzzing attack. Security professionals, on the other hand, leverage fuzzing techniques to assess the security and stability of applications. https://brightsec.com/blog/fuzzing/

Submitted by packet_pusher· Mar 6, 2026Vulnerability Management

Question

A company's application development has been outsourced to a third-party development team. Based on the SLA, the development team must follow industry best practices for secure coding. Which of the following is the BEST way to verify this agreement?

Options

  • AInput validation
  • BSecurity regression testing
  • CApplication fuzzing
  • DUser acceptance testing
  • EStress testing

How the community answered

(46 responses)
  • A
    4% (2)
  • C
    85% (39)
  • D
    2% (1)
  • E
    9% (4)

Explanation

Threat actors use fuzzing to find zero-day exploits - this is known as a fuzzing attack. Security professionals, on the other hand, leverage fuzzing techniques to assess the security and stability of applications. https://brightsec.com/blog/fuzzing/

Topics

#Secure coding#Application security testing#Fuzzing#Third-party risk management

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice