Exam CS0-003 topic 1 question 418 discussion

Actual exam question from CompTIA's CS0-003

Question #: 418
Topic #: 1

An organization has implemented code into a production environment. During a routine test, a penetration tester found that some of the code had a backdoor implemented causing a developer to make changes outside of the change management windows. Which of the following is the best way to prevent this issue?

A. SDLC training
B. Dynamic analysis
C. Debugging
D. Source code review

Show Suggested Answer

Suggested Answer: D 🗳️

by Sad3lf at May 2, 2025, 8:44 p.m.

Comments

Submit Cancel

Justheretolook

1 month ago

Selected Answer: D

The correct answer is: D. Source code review Explanation: • D. Source code review allows for manual or automated inspection of code before it goes into production. It helps detect malicious code, such as backdoors, and unauthorized changes, ensuring that only approved and secure code is deployed. This is critical in identifying insider threats or security policy violations.

upvoted 1 times

...

Only12go

1 month, 2 weeks ago

Selected Answer: D

A source code review involves manually or automatically inspecting the application's source code for security vulnerabilities, backdoors, and other coding flaws. It allows teams to: Detect unauthorized changes, such as malicious backdoors, Ensure adherence to security and coding standards, Catch vulnerabilities before deployment. This is the best preventative measure against backdoors being inserted into production code, especially when change management processes are bypassed.

upvoted 2 times

...

Sad3lf

1 month, 3 weeks ago

Selected Answer: A

SDLC Training is correct I believe

upvoted 1 times

...