Exam 350-201 topic 1 question 47 discussion

Actual exam question from Cisco's 350-201

Question #: 47
Topic #: 1

A security expert is investigating a breach that resulted in a $32 million loss from customer accounts. Hackers were able to steal API keys and two-factor codes due to a vulnerability that was introduced in a new code a few weeks before the attack. Which step was missed that would have prevented this breach?

A. use of the Nmap tool to identify the vulnerability when the new code was deployed
B. implementation of a firewall and intrusion detection system
C. implementation of an endpoint protection system
D. use of SecDevOps to detect the vulnerability during development

Show Suggested Answer

Suggested Answer: D 🗳️
Reference:
https://securityintelligence.com/how-to-prioritize-security-vulnerabilities-in-secdevops/

by DrVoIP at Feb. 17, 2023, 8:57 p.m.

Comments

Submit Cancel

TrainingTeam

8 months ago

Selected Answer: D

The breach described could have been prevented by integrating security practices into the development lifecycle, known as SecDevOps. This approach includes continuous security checks and vulnerability assessments during the development stages, which would likely have identified the vulnerability before the code was deployed.

upvoted 1 times

...

DrVoIP

2 years, 4 months ago

The step that was missed that would have prevented this breach is the use of SecDevOps to detect the vulnerability during development. By implementing secure development practices, such as regular code reviews, testing, and vulnerability assessments, vulnerabilities can be detected and addressed earlier in the development process, reducing the risk of a successful attack. In this case, the vulnerability was introduced in new code, indicating that it could have been prevented with better secure development practices. - ChatGPT

upvoted 1 times

...