A security analyst is reviewing the following code in the public repository for potential risk...

CompTIA CAS-005 Question Answer

A security analyst is reviewing the following code in the public repository for potential risk concerns:

typescript

CopyEdit

include bouncycastle-1.4.jar;

include jquery-2.0.2.jar;

public static void main() {...}

public static void territory() { ... }

public static void state() { ... }

public static String code = "init";

public static String access_token = "spat-hfeiw-sogur-werdb-werib";

Which of the following should the security analyst recommend first to remediate the vulnerability?

Developing role-based security awareness training

Revoking the secret used in the solution

Purging code from public view

Scanning the application with SAST

CAS-005 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"