SY0-301 · Question #824
Which of the following would Jane, an administrator, use to detect an unknown security vulnerability?
The correct answer is B. Application fuzzing. Application fuzzing (fuzz testing) is a dynamic testing technique that sends malformed, random, or unexpected inputs to an application to trigger unexpected behavior, crashes, or security exceptions - thereby revealing unknown vulnerabilities that have not yet been documented…
Question
Which of the following would Jane, an administrator, use to detect an unknown security vulnerability?
Options
- APatch management
- BApplication fuzzing
- CID badge
- DApplication configuration baseline
How the community answered
(26 responses)- A4% (1)
- B88% (23)
- C8% (2)
Explanation
Application fuzzing (fuzz testing) is a dynamic testing technique that sends malformed, random, or unexpected inputs to an application to trigger unexpected behavior, crashes, or security exceptions - thereby revealing unknown vulnerabilities that have not yet been documented or patched. It is specifically designed to find zero-day and undiscovered flaws. Option A (patch management) addresses known vulnerabilities, not unknown ones. Option C (ID badge) is a physical access control with no relevance to software vulnerability discovery. Option D (application configuration baseline) documents expected configuration states and can detect unauthorized changes, but it does not actively probe for unknown code-level vulnerabilities the way fuzzing does.
Topics
Community Discussion
No community discussion yet for this question.