GIAC GSLC Exam - Topic 7 Question 2 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 2
Topic #: 7

[All GSLC Questions]

You are responsible for security at a company that uses a lot of Web applications. You are most concerned about flaws in those applications allowing some attacker to get into your network. What method would be best for finding such flaws?

AAutomated penetration testing

BCode review

CManual penetration testing

DVulnerability scanning

Show Suggested Answer

Suggested Answer: D

by Gary at May 06, 2022, 12:32 AM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Reid

4 months ago

Wait, can automated tests really find all the flaws? Sounds too good to be true!

upvoted 0 times

...

Ollie

4 months ago

Vulnerability scanning is just too basic for serious flaws.

upvoted 0 times

...

Tegan

4 months ago

Code review can catch a lot of issues early on.

upvoted 0 times

...

Stacey

4 months ago

Manual penetration testing is way more thorough, though!

upvoted 0 times

...

Alysa

5 months ago

I think automated penetration testing is super efficient.

upvoted 0 times

...

Joesph

5 months ago

Vulnerability scanning seems like a good starting point, but I feel like it might not find all the deep-seated issues in web applications.

upvoted 0 times

...

Sabra

5 months ago

I practiced a similar question where manual penetration testing was highlighted as the best method for finding complex flaws. I wonder if that applies here too.

upvoted 0 times

...

Genevieve

5 months ago

I think code review is important, but it might miss some runtime issues that a penetration test could catch.

upvoted 0 times

...

Thora

5 months ago

I remember we discussed how automated penetration testing can quickly identify vulnerabilities, but I'm not sure if it's as thorough as manual testing.

upvoted 0 times

...

Sanjuana

5 months ago

Okay, based on the output, it looks like option B is the way to go. The command to edit the cluster parameters and enable Shadow Clones seems like the right approach here.

upvoted 0 times

...

Lynette

5 months ago

Okay, let's see. The key here is that we need to make sure the self-service portal and the B2C Commerce storefront have the same look and feel. I'm thinking option B might be the way to go, since it talks about setting the Portal Theme URL to match the style sheet.

upvoted 0 times

...

Jaime

5 months ago

This is a good one. I'd recommend the Content Builder templates and the dynamic content blocks - those seem like the most straightforward and scalable solutions for this scenario.

upvoted 0 times

...

Ronna

5 months ago

Hmm, I'm a bit unsure about this one. I know we need to configure the port mode, but I'm not sure if it's supposed to be access or network. Let me think this through step-by-step.

upvoted 0 times

...