Câu 17: CAS-005: CompTIA SecurityX

A security engineer receives reports through the organization's bug bounty program about remote code execution in a specific component in a custom application. Management wants to properly secure the component and proactively avoid similar issues. Which of the following is the best approach to uncover additional vulnerable paths in the application?

1. A. Leverage an exploitation framework to uncover vulnerabilities.
2. B. Use fuzz testing to uncover potential vulnerabilities in the application. — đáp án hiện tại
3. C. Utilize a software composition analysis tool to report known vulnerabilities.
4. D. Reverse engineer the application to look for vulnerable code paths.
5. E. Analyze the use of an HTTP intercepting proxy to dynamically uncover issues.