Exam CV0-003 topic 1 question 308 discussion

Actual exam question from CompTIA's CV0-003

Question #: 308
Topic #: 1

A company plans to publish a new application and must conform with security standards. Which of the following types of testing are MOST important for the systems administrator to run to assure the security and compliance of the application before publishing? (Choose two.)

A. Regression testing
B. Vulnerability testing
C. Usability testing
D. Functional testing
E. Penetration testing
F. Load testing

Show Suggested Answer

Suggested Answer: BE 🗳️

by 54a6b25 at July 15, 2024, 9:08 p.m.

Comments

Submit Cancel

BigM

5 months, 2 weeks ago

Selected Answer: BE

Before publishing a new application, ensuring security and compliance is critical. The two most important tests for security validation are Vulnerability Testing and Penetration Testing. 1️⃣ Vulnerability Testing (B) Scans the application for known security flaws (e.g., outdated libraries, misconfigurations, weak encryption). Uses automated tools like Nessus, Qualys, or OpenVAS. Ensures compliance with security standards like ISO 27001, NIST, or GDPR. 2️⃣ Penetration Testing (E) Simulates real-world attacks to identify exploitable security weaknesses. Uses ethical hacking techniques to test the application’s defenses. Helps assess how well the system can withstand attacks before it goes live.

upvoted 1 times

...

54a6b25

1 year, 1 month ago

B. Vulnerability testing E. Penetration testing Explanation: B. Vulnerability testing: This type of testing is essential to identify and address any security vulnerabilities within the application. It helps ensure the application is secure against known threats and meets security standards. E. Penetration testing: Penetration testing involves simulating attacks on the application to identify potential security weaknesses. It provides a comprehensive assessment of the application's security posture and helps ensure compliance with security standards.

upvoted 2 times

...