nerdexam
(ISC)2

CSSLP · Question #376

The fundamental benefit of a sandboxed environments is about:

The correct answer is D. isolation and containment to reduce risk. The fundamental benefit of sandboxed environments is isolation and containment, which reduces the risk of malicious or faulty code affecting the host system.

Secure Software Concepts

Question

The fundamental benefit of a sandboxed environments is about:

Options

  • Arestricting access to code repositories.
  • Bauthentication and authorization.
  • Cidentification of vulnerabilities in code with no false positives.
  • Disolation and containment to reduce risk.

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    5% (2)
  • D
    90% (38)

Why each option

The fundamental benefit of sandboxed environments is isolation and containment, which reduces the risk of malicious or faulty code affecting the host system.

Arestricting access to code repositories.

Restricting access to code repositories is a function of version control and access control systems, not the primary benefit of a sandbox.

Bauthentication and authorization.

Authentication and authorization are about verifying identity and granting permissions, which are security concepts distinct from the primary function of a sandbox.

Cidentification of vulnerabilities in code with no false positives.

While sandboxes can be used in vulnerability testing, they do not guarantee the identification of all vulnerabilities or prevent false positives.

Disolation and containment to reduce risk.Correct

A sandbox creates a tightly controlled, isolated environment where programs can run without affecting the host system or other applications. This isolation and containment are critical for executing untrusted code or testing new software, as any malicious actions or errors are confined to the sandbox, thus significantly reducing the risk to the overall system.

Concept tested: Benefit of sandboxed environments

Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview

Topics

#Sandboxing#Isolation#Containment#Risk Reduction

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice