MENU
An organization is implementing an application software security control their custom-written code that provides web---based database access to sales partners. Which action will help mitigate the risk of the application being compromised?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
DE
Desmond
10 months ago
Wow, I didn't realize sharing source code could be so risky!
AL
Alex
11 months ago
Logging requests sounds good, but is it enough?
AR
Argelia
11 months ago
Not sure why anyone would pick A, that's just asking for trouble!
FE
Felix
11 months ago
I think C is the best choice, signatures can really help.
MA
Martina
11 months ago
Option B is a smart move, knowing your high-risk assets is key.
TH
Therese
11 months ago
Logging connection requests sounds important for monitoring, but I’m not sure if it directly mitigates risk like the other options. Maybe option D is less effective?
GE
Gearldine
12 months ago
I feel like creating signatures for an IDS is a proactive measure, and it seems like option C could be a good way to detect specific threats.
DE
Delfina
12 months ago
I’m a bit unsure, but I think identifying high-risk assets could help in understanding the overall security posture. It might be option B?
JA
Jamie
12 months ago
I remember we discussed how sharing source code can actually increase risk, so I think option A is definitely not the right choice.
AL
Alline
12 months ago
This is a tricky one. I'm not sure if logging connection requests or identifying high-risk assets on the same network would be enough to mitigate the risk of the application being compromised. I'm going to go with creating custom IDS signatures to detect attacks specific to the web application.
LI
Linsey
12 months ago
I've seen questions like this before. The key is to focus on security controls that can help protect the application itself, rather than just the network or infrastructure. I think creating custom IDS signatures is the best option here.
IR
Irene
1 year ago
Okay, let's think this through. Providing the source code to partners seems like a bad idea, as that could increase the risk of the application being compromised. Logging connection requests could be helpful, but it doesn't directly address the risk. I'm leaning towards creating signatures for the IDS to detect attacks specific to the web application.
DU
Dusti
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options that could help, but I'm not sure which one is the best approach.
MA
Man
1 year ago
This seems like a straightforward security question. I think the key is to focus on mitigating the risk of the application being compromised.
LI
Lindsey
1 year ago
The key here is understanding the different broker roles in Kafka. I'll make sure to read through the options carefully and select the three that best describe broker responsibilities.
MA
Matthew
2 years ago
I'd go with option C. Gotta love those custom IDS signatures - they're like the cybersecurity version of a secret handshake.
MA
Marjory
2 years ago
Logging connection requests is also important to monitor any suspicious activity from outside hosts.
LO
Loren
2 years ago
It's important to have a strong defense in place, especially when dealing with web-based database access.
MA
Maile
2 years ago
I agree, having signatures for their IDS tailored to their web application can provide better protection.
AL
Albina
2 years ago
Option C sounds like a good choice. Custom IDS signatures can definitely help detect specific attacks.
FR
France
2 years ago
I personally think option D is the way to go.
CU
Curtis
2 years ago
Sharing the source code with sales partners? Yeah, that's a great idea if they want to be the next target of a data breach. Hard pass on option A.
BR
Brandon
2 years ago
Option B is the right choice. Securing the high-risk assets on the same network is crucial to prevent the whole system from being compromised.
SH
Shanda
2 years ago
Logging the connection requests is also important to track any suspicious activity from outside hosts.
AS
Ashton
2 years ago
Agreed, securing those assets will help prevent any potential compromise of the system.
MA
Malcom
2 years ago
Option B is definitely the way to go. We need to protect those high-risk assets.
PA
Paris
2 years ago
I agree with Hailey, option C seems like the most logical choice.
DA
Daryl
2 years ago
I don't know, man. Logging connection requests from outside hosts seems like the easiest and most straightforward solution to me. Why overcomplicate things?
CH
Chantay
2 years ago
Option C is definitely the way to go. Creating custom IDS signatures is the best way to protect against targeted attacks on their web app.
CA
Carmen
2 years ago
User 2
JO
Joaquin
2 years ago
User 1
HA
Hailey
2 years ago
I disagree, I believe option C is more effective.
SH
Shawna
2 years ago
I think option B is the best choice.