MENU
Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks.
What among the following should Wesley avoid from considering?
Suggested Answer: C
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
JA
Janine
12 months ago
A seems odd... why would you cross a trust boundary with deserialization?
DI
Dion
12 months ago
B is super important! Gotta know those permissions.
HA
Harris
12 months ago
Wait, are we really saying to avoid validating untrusted input? Sounds risky!
LO
Louis
1 year ago
Totally agree with that! Serialization can be risky.
BR
Breana
1 year ago
C is a big no! Security-sensitive classes should never be serialized.
BE
Bernadine
1 year ago
I’m a bit confused, but I recall something about understanding security permissions being important, so B might not be the right choice to avoid.
LO
Louis
1 year ago
I practiced a question similar to this, and I think validating untrusted input is crucial, so D seems like something Wesley should definitely consider.
NO
Norah
1 year ago
I'm not entirely sure, but I feel like allowing serialization for security-sensitive classes could lead to vulnerabilities, so C might be the answer.
PA
Paul
1 year ago
I think I remember that deserializing trusted data across a trust boundary is risky, so maybe A is the one to avoid?
HU
Hui
1 year ago
Alright, time to put my Solaris skills to the test. I think the key here is to get the ISO image copied over, set the publisher, and then make sure the service is configured properly. I'll need to pay close attention to the details, but I feel like I've got a good handle on this.
JE
Jerrod
1 year ago
I'm pretty sure the important protocols in the IPsec framework are AH, ESP, and IKE. I'll make sure to select those options.
MA
Major
1 year ago
Okay, let me see here. If the goal is to persist the SQL query so others can use it, then a view seems like the logical choice. That way, the query is encapsulated and can be easily accessed by other users.
VE
Verda
1 year ago
I remember a practice question about intellectual property but can't recall if it was specifically about business plans. I lean towards "Trade secret."