A penetration tester downloads a JAR file that is used in an organization's production environment. The tester evaluates the contents of the JAR file to identify potentially vulnerable components…

The correct answer is D. SCA. The tester's activity involves analyzing the contents of a JAR file to identify potentially vulnerable components. This process is known as Software Composition Analysis (SCA). Definition: SCA involves analyzing software to identify third-party and open-source components…

Submitted by parkjh· Mar 6, 2026Network Security

Question

A penetration tester downloads a JAR file that is used in an organization's production environment. The tester evaluates the contents of the JAR file to identify potentially vulnerable components that can be targeted for exploit. Which of the following describes the tester's activities?

Options

ASAST
BSBOM
CICS
DSCA

How the community answered

(13 responses)

C
8% (1)
D
92% (12)

Explanation

The tester's activity involves analyzing the contents of a JAR file to identify potentially vulnerable components. This process is known as Software Composition Analysis (SCA). Definition: SCA involves analyzing software to identify third-party and open-source components, checking for known vulnerabilities, and ensuring license compliance. Purpose: To detect and manage risks associated with third-party software components.

Topics

#Penetration testing#Software Composition Analysis (SCA)#Vulnerability assessment

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice