PK0-004 · Question #230
A quality auditor finds suspicious code during a software test. For which of the following could this be a trigger?
The correct answer is A. Incident response. Suspicious code discovered during a software test signals a potential security threat or unauthorized modification, which is the type of event that initiates the incident response process.
Question
A quality auditor finds suspicious code during a software test. For which of the following could this be a trigger?
Options
- AIncident response
- BQuality control
- CResource changes
- DBusiness continuity response
How the community answered
(23 responses)- A96% (22)
- D4% (1)
Why each option
Suspicious code discovered during a software test signals a potential security threat or unauthorized modification, which is the type of event that initiates the incident response process.
Incident response is the structured process for identifying, containing, and remediating security events such as malicious or unauthorized code. Suspicious code found during testing meets the threshold of a potential security incident, making incident response the appropriate triggered process. The finding must be investigated to determine whether a breach, injection, or insider threat has occurred.
Quality control inspects deliverables against predetermined quality standards; suspicious code implies a security threat that exceeds the scope of a standard quality defect.
Resource changes refer to modifications in personnel or project assets and are unrelated to detecting potentially malicious code.
Business continuity response addresses maintaining operations during a major disruption or disaster, not a targeted code-level security finding.
Concept tested: Incident response triggers from suspicious software findings
Source: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-61r2.pdf
Topics
Community Discussion
No community discussion yet for this question.