- Home
- All questions
- Question 178
CompTIA Security+ study material · question 178 of 611
A flaw is found that no amount of correct implementation would have prevented. Which category does it fall into, and what practice addresses it?
Show the answer
Answer: A. Insecure design, addressed by threat modelling earlier than code review
If the design is wrong, correct code implements the wrong thing; the fix has to happen before implementation.
Source: OWASP Top 10 (OWASP) — OWASP Top Ten › Insecure Design