A development team is using an open-source library in their application. A security analyst discovers that the library has a known critical vulnerability. The team is in the maintenance phase of the SDLC. What is the most appropriate first step?

Document the vulnerability and continue using the library because it is open source.

Remove the library immediately and rewrite all functionality from scratch.

Update the library to a patched version if available, and verify that the application still functions correctly.

Switch to a different open-source library without checking its security history.

GIAC Information Security Professional

Domain 3Objective 3

Software Development Security GISP Practice Questions (Page 12)

Part of the Access, Testing, and Development domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 10–17 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

9concepts

Questions 56–56

56application · medium
A development team is using an open-source library in their application. A security analyst discovers that the library has a known critical vulnerability. The team is in the maintenance phase of the SDLC. What is the most appropriate first step?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Software Development Security GISP Practice Questions (Page 12)

Questions 56–56

A development team is using an open-source library in their application. A security analyst discovers that the library has a known critical vulnerability. The team is in the maintenance phase of the SDLC. What is the most appropriate first step?

Keep studying — Access, Testing, and Development