exam questions

Exam CS0-002 All Questions

View all questions & answers for the CS0-002 exam

Exam CS0-002 topic 1 question 405 discussion

Actual exam question from CompTIA's CS0-002
Question #: 405
Topic #: 1
[All CS0-002 Questions]

During an audit, several customer order forms were found to contain inconsistencies between the actual price of an item and the amount charged to the customer. Further investigation narrowed the cause of the issue to manipulation of the public-facing web form used by customers to order products. Which of the following would be the best way to locate this issue?

  • A. Reduce the session timeout threshold.
  • B. Deploy MFA for access to the web server.
  • C. Implement input validation.
  • D. Run a dynamic code analysis.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
zecomeia_007
11 months, 2 weeks ago
Selected Answer: C
The issue described involves manipulation of a public-facing web form, which suggests that the problem may arise from improper handling of user input. The best way to locate and prevent such issues is to ensure that any data input by users is properly validated before processing. C. Implement input validation is the correct answer.
upvoted 2 times
...
sirpetey
1 year, 8 months ago
Selected Answer: D
Well the question is "locate" this issue. the only thing that locates things out of all the answers is only D?
upvoted 1 times
...
kumax
1 year, 9 months ago
Chat GPT: Why not D:? I apologize for the oversight in my previous response. Running a dynamic code analysis (option D) is generally not used for locating issues related to web form manipulation or inconsistencies in public-facing web forms. Dynamic code analysis tools are typically used to find security vulnerabilities and issues in an application by analyzing its runtime behavior. To locate issues related to web form manipulation and pricing inconsistencies in public-facing web forms, you would typically use methods like code review, security testing, or penetration testing to inspect the application's source code and test its behavior. Dynamic analysis (DAST) may be part of a broader testing strategy but is generally more focused on security vulnerabilities than uncovering issues like pricing inconsistencies. I appreciate your patience, and I hope this clarifies the situation.
upvoted 1 times
...
Chilaqui1es
1 year, 9 months ago
"locate issue" Dynamic analysis is the only option for locating. D.
upvoted 1 times
...
kumax
1 year, 9 months ago
Selected Answer: C
ChatGPT: The issue described involves manipulation of a web form that customers use to order products, which indicates a potential security issue. To locate and address this issue, implementing input validation (Option C) is the most appropriate solution. Input validation helps ensure that the data submitted via the web form is consistent with expected values and formats. This can prevent malicious users from manipulating the form to order products at incorrect prices.
upvoted 2 times
...
HotWings8
2 years ago
Duplicate of question 264 where the answer was also D except it was Static code scan >> https://www.examtopics.com/discussions/comptia/view/97765-exam-cs0-002-topic-1-question-264-discussion/
upvoted 4 times
ProNerd
1 year, 12 months ago
Well given that dynamic and static code analysis are two different things, doesn't that tell you something?
upvoted 2 times
Saphi
1 year, 10 months ago
The rest are all possible fixes and the question asks how to locate the issue.
upvoted 3 times
...
...
...
tutita
2 years, 1 month ago
Selected Answer: D
correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...