A Security Controls Assessor Intends to Perform a Holistic Configuration

question 430

Multiple Choice

A security controls assessor intends to perform a holistic configuration compliance test of networked assets. The assessor has been handed a package of definitions provided in XML format, and many of the files have two common tags within them: "<object object_ref=… />" and "<state state_ref=… />". Which of the following tools BEST supports the use of these definitions?

• A) HTTP interceptor
• B) Static code analyzer
• C) SCAP scanner
• D) XML fuzzer

---

Definitions:

Hiring Freeze

A temporary policy implemented by organizations to stop or slow down the recruitment of new employees.

Psychological Contract

An unwritten set of expectations existing between an employer and employees regarding mutual obligations, benefits, and commitments.

Distributive Justice

A concept in social science and philosophy regarding the fair distribution of resources and benefits among members of a society.

Procedural Justice

The fairness of the processes used to make decisions, particularly in terms of how individuals believe they are treated by authorities or organizations during those processes.