Interpret Application Security Scan Results GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   In a DAST report, what does 'exploitability' indicate?

   • AThe number of lines of code affected by the vulnerability
   • BThe likelihood that the finding is a false positive
   • CHow easily an attacker could take advantage of the vulnerability
   • DThe severity of the vulnerability's impact
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A SAST report identifies a stored XSS vulnerability in a comment feature. The code stores user input in a database and later renders it in a view without encoding. The team confirms the finding is a true positive. What is the most appropriate remediation step?

   • AAdd input validation to reject any comment containing HTML tags, which will prevent all XSS attacks.
   • BIncrease the SAST scanner's sensitivity so it can detect similar issues in the future.
   • CRemove the comment feature entirely because it is inherently insecure and cannot be fixed.
   • DAdd output encoding when rendering the comment in the view to neutralize the XSS payload.
   Reveal Solution Discussion Select an answer first