Discuss GIAC GCCC Exam Topic 2 Question 85

What is a recommended defense for the CIS Control for Application Software Security?

AKeep debugging code in production web applications for quick troubleshooting

BLimit access to the web application production environment to just the developers

CRun a dedicated vulnerability scanner against backend databases

DDisplay system error messages for only non-kernel related events

Suggested Answer: C

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Afton 2 days ago

Option D makes sense too. Hiding errors can prevent attacks.

Wilson 7 days ago

I agree, but C could also be important for security.

Tanja 12 days ago

I think option B is the best choice. Limited access is crucial.

Lettie 17 days ago

D protects user info. We can't expose system details.

Phuong 22 days ago

C covers backend security well. We need that for safety.

Ciara 28 days ago

True, but B limits access too much. Collaboration is key.

France 1 month ago

A is risky. Debugging code shouldn't be in production.

Amie 1 month ago

I agree, but D is also important. Hiding error messages can prevent attacks.

Wilson 1 month ago

I think option C is the best choice. Vulnerability scanners are crucial.

Kati 2 months ago

D helps prevent information leaks. It's a solid defense.

Sylvia 2 months ago

C covers backend security well. Can't overlook vulnerabilities.

Viola 2 months ago

B is too restrictive. Developers need access, but not too much.

Vashti 2 months ago

A is risky. Debugging code in production? No way!

Felicitas 2 months ago

I agree, but D seems important too. Hiding error messages is smart.

Shalon 2 months ago

I think option C is the best choice. Vulnerability scanners are crucial.

Catalina 3 months ago

B sounds good, but what if they need to troubleshoot?

Golda 3 months ago

Wait, is it really okay to limit access just to developers? Seems risky.

Vincent 3 months ago

D is crucial! No one wants to expose sensitive info.

Annita 3 months ago

I disagree, A can lead to security risks if left in production.

Donette 3 months ago

C is a solid choice! Vulnerability scanners are essential.

Terina 4 months ago

I vaguely remember that keeping debugging code in production is a bad practice, but I can't remember why that would be relevant to this question.

Refugia 5 months ago

I practiced a similar question on vulnerability scanning, and I think running a scanner is important, but it might not be the main defense for application security.

Jacquelyne 5 months ago

I feel like displaying system error messages could lead to security risks, but I can't recall the exact details.

Christiane 5 months ago

I think I remember something about limiting access to production environments, but I'm not sure if it's the best option here.

GIAC GCCC Exam - Topic 2 Question 85 Discussion