A Development Team Uses Open-Source Software and Follows an Agile

question 9

Multiple Choice

A development team uses open-source software and follows an Agile methodology with two-week sprints. Last month, the security team filed a bug for an insecure version of a common library. The DevOps team updated the library on the server, and then the security team rescanned the server to verify it was no longer vulnerable. This month, the security team found the same vulnerability on the server. Which of the following should be done to correct the cause of the vulnerability?

• A) Deploy a WAF in front of the application.
• B) Implement a software repository management tool.
• C) Install a HIPS on the server.
• D) Instruct the developers to use input validation in the code.

---

Definitions:

Principal's Identity

Refers to the clear disclosure or acknowledgment of the principal party in an agency relationship.

Actual Express Authority

The specific powers explicitly granted by one party to another, typically in a principal-agent relationship, where the agent is empowered to act on the principal's behalf.

Purchase Price

Refers to the amount of money paid or agreed to be paid by a buyer to acquire an asset or service.

Respondeat Superior

Respondeat Superior is a legal doctrine holding that an employer is responsible for the actions of employees performed within the course of their employment.