Free CS0-003 Web TestEngine Demo

Q23 Multiple choice

During a company's most recent incident, a vulnerability in custom software was exploited on an externally facing server by an APT. The lessons-learned report noted the following:

1. The development team used a new software language that was not supported by the security team's automated assessment tools.
2. During the deployment, the security assessment team was unfamiliar with the new language and struggled to evaluate the software during advanced testing. Therefore, the vulnerability was not detected.
3. The current IPS did not have effective signatures and policies in place to detect and prevent runtime attacks on the new application.

To allow this new technology to be deployed securely going forward, which of the following will BEST address these findings? (Choose two.)

Select all that apply.

A
Train the security assessment team to evaluate the new language and verify that best practices for secure coding have been followed
B
Work with the automated assessment-tool vendor to add support for the new language so these
vulnerabilities are discovered automatically
C
Contact the human resources department to hire new security team members who are already familiar with the new language
D
Run the software on isolated systems so when they are compromised, the attacker cannot pivot to adjacent systems
E
Instruct only the development team to document the remediation steps for this vulnerability
F
Outsource development and hosting of the applications in the new language to a third-party vendor so the risk is transferred to that provider

CS0-003 Web TestEngine demo