Study. uk . com
  1. Home
  2. All questions
  3. Question 178

CompTIA Security+ study material · question 178 of 611

A flaw is found that no amount of correct implementation would have prevented. Which category does it fall into, and what practice addresses it?

  1. Insecure design, addressed by threat modelling earlier than code review
  2. Security misconfiguration, addressed by hardening
  3. Vulnerable components, addressed by dependency updates
  4. Injection, addressed by parameterised queries
Show the answer

Answer: A. Insecure design, addressed by threat modelling earlier than code review

If the design is wrong, correct code implements the wrong thing; the fix has to happen before implementation.

Source: OWASP Top 10 (OWASP) — OWASP Top Ten › Insecure Design

Challenge yourself on this topic → Study as cards