CISA Certified Information Systems Auditor – Question1801

The majority of software vulnerabilities result from a few known kinds of coding defects, such as (Choose five.):

A.
buffer overflows
B. format string vulnerabilities
C. integer overflow
D. code injection
E. command injection
F. None of the choices.

Correct Answer: ABCDE

Explanation:

Explanation:
The majority of software vulnerabilities result from a few known kinds of coding defects. Common software defects include buffer overflows, format string vulnerabilities, integer overflow, and code/command injection. Some common languages such as C and C+
+ are vulnerable to all of these defects. Languages such as Java are immune to some of these defects but are still prone to code/ command injection and other software defects which lead to software vulnerabilities.