You save $69.98
The organization implemented the response to this scenario: A public API accepts uploads later parsed by an internal privileged service, but design diagrams omit the parser trust boundary. The approved response was: Model data flows, trust boundaries, privilege transitions and abuse cases before selecting protections. Which statement MOST accurately identifies a remaining risk or constraint?
Threat modeling finds attack paths where untrusted input crosses privileges or trust zones. Review records document attack paths, mitigations and negative parser authorization tests.
Changing data flows and permissions invalidate unreviewed threat assumptions.
An authenticated user can still supply malicious input across a trust boundary.
Parsing content and privilege transitions require deeper controls than suffix checks.
Management implemented a response after this event: A public API accepts uploads later parsed by an internal privileged service, but design diagrams omit the parser trust boundary. The response was: Model data flows, trust boundaries, privilege transitions and abuse cases before selecting protections. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Review records document attack paths, mitigations and negative parser authorization tests. Threat modeling finds attack paths where untrusted input crosses privileges or trust zones.
Transport security does not test the relevant trust-boundary abuse case.
A missing trust boundary remains untested by an unrelated scan.
Normal feature behavior cannot establish resistance to attacker-controlled input crossing privilege boundaries.
A message relay has authenticated users but attackers can alter event payloads between queue publication and audit storage. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Authentication of a sender session alone does not guarantee that downstream bytes are unchanged. Integrity keys and processing-order protection must account for replay or substituted messages.
Session authentication is not end-to-end payload integrity across the queue-to-audit path.
At-rest secrecy cannot independently detect forged event contents.
An unauthenticated identity field can be forged or replayed.
The organization implemented the response to this scenario: A message relay has authenticated users but attackers can alter event payloads between queue publication and audit storage. The approved response was: Identify tampering at the transport/storage trust boundary and require authenticated message integrity checks. Which statement MOST accurately identifies a remaining risk or constraint?
Authentication of a sender session alone does not guarantee that downstream bytes are unchanged. A modified queued message is rejected and the attempted alteration is logged.
A legitimate session can still have payloads modified after publication.
Authenticated integrity does not by itself give freshness or anti-replay sequencing.
Confidentiality is not an end-to-end modification attribution mechanism.
Management implemented a response after this event: A message relay has authenticated users but attackers can alter event payloads between queue publication and audit storage. The response was: Identify tampering at the transport/storage trust boundary and require authenticated message integrity checks. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A modified queued message is rejected and the attempted alteration is logged. Authentication of a sender session alone does not guarantee that downstream bytes are unchanged.
Producer authentication without end-to-end verification misses the alteration.
Encrypted storage does not prove incoming data integrity.
Connection uptime is not evidence of authenticated event contents.
A software vendor refuses to identify embedded libraries despite a recent vulnerable package disclosure. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Supply-chain transparency enables dependency exposure assessment and coordinated remediation. An SBOM documents components but does not by itself prove absence of exploitation or vulnerabilities.
High-level assurances cannot identify which embedded packages are affected by a specific advisory.
Incomplete component identification impedes identifying and remediating a known vulnerable library.
Indiscriminate removal fails to establish a governed supplier vulnerability management approach.
A supplier provides an SBOM naming software packages but omits their versions and stable identifiers. An exploit has just been disclosed in one embedded library. What is the MOST consequential limitation of the supplier inventory for determining affected product releases?
A component name alone cannot distinguish affected release ranges or identify the supplier builds requiring remediation; usable versioned identity and vulnerability applicability evidence are needed.
Version, build, configuration, and vulnerability applicability must be checked; a name match alone overstates scope.
Unsupported sales assurance cannot establish which shipped builds include the vulnerable dependency.
A partial unversioned list misses transitive dependencies and cannot establish the exact affected release inventory.
Management implemented a response after this event: A software vendor refuses to identify embedded libraries despite a recent vulnerable package disclosure. The response was: Require a usable software bill of materials, vulnerability response commitments and supplier validation. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
An affected component is located across purchased products with accountable remediation timelines. Supply-chain transparency enables dependency exposure assessment and coordinated remediation.
Marketing controls do not demonstrate package-level impact analysis.
An unusable inventory does not support specific vulnerability remediation decisions.
Training cannot show which products contain the disclosed package or when fixes ship.
A network switch batch arrives with broken tamper seals and inconsistent manufacturing identifiers. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Untrusted hardware provenance may defeat software configuration and postinstallation scanning. A clean firmware hash alone cannot establish a counterfeit device's physical supply-chain integrity.
Basic operation and one hash cannot establish trustworthy device provenance.
Removing anomaly evidence obstructs investigation of possible counterfeit hardware.
An untrusted supply-chain actor cannot alone resolve suspicious manufacturing discrepancies.
The organization implemented the response to this scenario: A network switch batch arrives with broken tamper seals and inconsistent manufacturing identifiers. The approved response was: Quarantine suspect devices and validate provenance through trusted procurement and vendor channels before deployment. Which statement MOST accurately identifies a remaining risk or constraint?
Untrusted hardware provenance may defeat software configuration and postinstallation scanning. Receiving records, serial verification and vendor attestations clear or reject each suspect unit.
Firmware integrity cannot establish hardware provenance or detect all counterfeit modifications.
A reset does not reconstruct custody or physical component authenticity.
Functional behavior is independent of the device’s manufacturing and procurement history.
Management implemented a response after this event: A network switch batch arrives with broken tamper seals and inconsistent manufacturing identifiers. The response was: Quarantine suspect devices and validate provenance through trusted procurement and vendor channels before deployment. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Receiving records, serial verification and vendor attestations clear or reject each suspect unit. Untrusted hardware provenance may defeat software configuration and postinstallation scanning.
Connectivity does not validate suspect provenance.
Uncorroborated supplier assertions are not independent authenticity evidence.
Software scanning cannot validate counterfeit hardware or chain of custody.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
