nerdexam
CompTIA

PT0-002 · Question #167

A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a…

The correct answer is C. Buffer overflows. Fuzzing introduces unexpected inputs into a system and watches to see if the system has any negative reactions to the inputs that indicate security, performance, or quality gaps or issues.

Vulnerability discovery and analysis

Question

A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?

Options

  • AWeak authentication schemes
  • BCredentials stored in strings
  • CBuffer overflows
  • DNon-optimized resource management

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    91% (48)
  • D
    2% (1)

Explanation

Fuzzing introduces unexpected inputs into a system and watches to see if the system has any negative reactions to the inputs that indicate security, performance, or quality gaps or issues.

Topics

#Fuzzing#Buffer Overflow#Vulnerability Discovery#Software Security

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice