To save time, a company that is developing a new VPN solution has decided to use the OpenSSL library within its proprietary software. Which of the following should the company consider to maximize risk reduction from vulnerabilities introduced by OpenSSL?
The correct answer is: D. Implement an ongoing, third-party software and library review and regression testing.
Using third-party libraries like OpenSSL introduces potential vulnerabilities that must be managed proactively. The best way to maximize risk reduction is by implementing a continuous process for reviewing, testing, and updating the third-party library:
This approach ensures that vulnerabilities are identified and mitigated promptly while maintaining compatibility with the company's proprietary software.
Why the other options are incorrect:
Include stable, long-term releases of third-party libraries instead of using newer versions:
Ensure the third-party library implements the TLS and disable weak ciphers:
Compile third-party libraries into the main code statically instead of using dynamic loading:
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams