Câu 25: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

A software development team is conducting functional and user acceptance testing of internally developed web applications using a COTS solution. For automated testing, the solution uses valid user credentials from the enterprise directory to authenticate to each application. The solution stores the username in plain text and the corresponding password as an encoded string in a script within a file, located on a globally accessible network share. The account credentials used belong to the development team lead. To reduce the risks associated with this scenario while minimizing disruption to ongoing testing, which of the following are the BEST actions to take? (Choose two.)

1. A. Restrict access to the network share by adding a group only for developers to the share's ACL — đáp án hiện tại
2. B. Implement a new COTS solution that does not use hard-coded credentials and integrates with directory services — đáp án hiện tại
3. C. Obfuscate the username within the script file with encoding to prevent easy identification and the account used
4. D. Provision a new user account within the enterprise directory and enable its use for authentication to the target applications. Share the username and password with all developers for use in their individual scripts
5. E. Redesign the web applications to accept single-use, local account credentials for authentication