SSCP · Question #319
Why does compiled code pose more of a security risk than interpreted code?
The correct answer is A. Because malicious code can be embedded in compiled code and be difficult to detect.. Compiled code is translated entirely into machine-level binary before execution, making it opaque and very difficult to inspect or audit for malicious logic without specialized reverse-engineering tools. An attacker can embed hidden malicious routines in compiled binaries that ar
Question
Why does compiled code pose more of a security risk than interpreted code?
Options
- ABecause malicious code can be embedded in compiled code and be difficult to detect.
- BIf the executed compiled code fails, there is a chance it will fail insecurely.
- CBecause compilers are not reliable.
- DThere is no risk difference between interpreted code and compiled code.
How the community answered
(26 responses)- A88% (23)
- B4% (1)
- C8% (2)
Explanation
Compiled code is translated entirely into machine-level binary before execution, making it opaque and very difficult to inspect or audit for malicious logic without specialized reverse-engineering tools. An attacker can embed hidden malicious routines in compiled binaries that are not visible without disassembly. Interpreted code, by contrast, is executed line-by-line from a human-readable (or at least more reviewable) source, making auditing more straightforward. Compilers themselves (C) are generally reliable tools. Option B describes a runtime failure concern, not an inspection/detection disadvantage. Option D is incorrect because a meaningful security distinction does exist.
Topics
Community Discussion
No community discussion yet for this question.