問題文
An engineer starting on an unfamiliar web service wants an overview of the attack patterns that could apply to it before choosing any technique at all. Which catalog answers that, and what does it hand over?
選択肢
- The catalog that answers this question is the weakness scoring system, and the entry it hands the engineer describes the ranking of the recorded vulnerabilities.
- The catalog that answers this question is the disclosed vulnerability register, and the entry it hands the engineer describes the identifier of the recorded vulnerabilities.
- The catalog that answers this question is the attack pattern catalog, and the entry it hands the engineer describes the mechanism of the recorded vulnerabilities.
- The catalog that answers this question is the software weakness enumeration, and the entry it hands the engineer describes the fault of the recorded vulnerabilities.