Exam CAS-004 topic 1 question 248 discussion

Actual exam question from CompTIA's CAS-004

Question #: 248
Topic #: 1

A security architect is implementing a web application that uses a database back end. Prior to production, the architect is concerned about the possibility of XSS attacks and wants to identify security controls that could be put in place to prevent these attacks. Which of the following sources could the architect consult to address this security concern?

A. SDLC
B. OVAL
C. IEEE
D. OWASP

Show Suggested Answer

Suggested Answer: D 🗳️

by Cock at March 19, 2023, 5:50 a.m.

Comments

Submit Cancel

Cock

Highly Voted 1 year, 5 months ago

Selected Answer: D

D. OWASP (Open Web Application Security Project) is a popular resource for web application security information and provides a detailed list of the most common web application vulnerabilities, including XSS. It also provides recommendations for security controls that can be implemented to prevent or mitigate these vulnerabilities. Therefore, the security architect could consult OWASP to obtain guidance on how to prevent XSS attacks.

upvoted 5 times

...

imather

Most Recent 1 year ago

Selected Answer: D

Repeat of 62.

upvoted 3 times

...

unBREAKable_Fs4

1 year, 5 months ago

D - OWASP

upvoted 4 times

...