Which of the following would allow the team to determine the scope of future incidents?

A coding error has been discovered on a customer-facing website. The error causes each request to return confidential PHI data for the incorrect organization. The IT department is unable to identify the specific customers who are affected. As a result, all customers must be notified of the potential breach.

Which of the following would allow the team to determine the scope of future incidents?
A . Intrusion detection system
B . Database access monitoring
C . Application fuzzing
D . Monthly vulnerability scans

View Answer

Answer: C

Explanation:

Fuzzing is a way of finding bugs using automation. It involves providing a wide range of invalid and unexpected data into an application then monitoring the application for exceptions. The invalid data used to fuzz an application could be crafted for a specific purpose, or randomly generated.