ISC2 Exam CAP Topic 5 Question 75 Discussion

Actual exam question for ISC2's CAP exam

Question #: 75
Topic #: 5

[All CAP Questions]

In the context of a Dependency Confusion Attack, which of the following files is analyzed for determining potential private packages?

Apackage.json

Brequirements.txt

CBoth A and B

DNone of the above

Show Suggested Answer

Suggested Answer: A

by Cecil at Nov 21, 2023, 01:53 PM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maryann

1 days ago

The package.json file would definitely be the one to analyze for potential private packages in a Dependency Confusion Attack. That's where all the package dependencies are listed.

upvoted 0 times

...

Audra

13 days ago

I'm not sure, but I think it could also be C) Both A and B.

upvoted 0 times

...

Elsa

14 days ago

I agree with Regenia, package.json is where private packages are determined.

upvoted 0 times

...

Regenia

24 days ago

I think the answer is A) package.json.

upvoted 0 times

...