A Penetration Tester Has Completed an Analysis of the Various

question 15

Multiple Choice

A penetration tester has completed an analysis of the various software products produced by the company under assessment. The tester found that over the past several years the company has been including vulnerable third-party modules in multiple products, even though the quality of the organic code being developed is very good. Which of the following recommendations should the penetration tester include in the report?

• A) Add a dependency checker into the tool chain.
• B) Perform routine static and dynamic analysis of committed code.
• C) Validate API security settings before deployment.
• D) Perform fuzz testing of compiled binaries.

---

Definitions:

Identifying Emotions

The process of recognizing and naming specific feelings, an important skill for emotional awareness and regulation.

Leading Question

A question that suggests a particular answer or is framed in such a way to induce a desired response.

Closed Question

A type of question that typically requires a yes or no response, or a choice among a limited set of options, limiting the scope of the answer.

Why Question

An inquiry that seeks to understand reasons or causes, often exploring motivations or underlying issues.