A security engineer evaluates the overall security of a custom mobile gaming application and notices...

Vendor: CompTIA
Product: CAS-004
Update on: Jul 17, 2025
Questions: 619

CompTIA CAS-004 Question Answer

A security engineer evaluates the overall security of a custom mobile gaming application and notices that developers are bringing in a large number of open-source packages without appropriate patch management. Which of the following would the engineer most likely recommend for uncovering known vulnerabilities in the packages?

Leverage an exploitation framework to uncover vulnerabilities.

Use fuzz testing to uncover potential vulnerabilities in the application.

Utilize a software composition analysis tool to report known vulnerabilities.

Reverse engineer the application to look for vulnerable code paths.

Analyze the use of an HTTP intercepting proxy to dynamically uncover issues.