Study. uk . com
  1. Home
  2. All questions
  3. Question 470

CISSP study material · question 470 of 500

Which approach does OWASP describe as best for detecting injection? Choose two.

  1. Reviewing only the parameters exposed in the documented API.
  2. Relying on a runtime application firewall to report blocked attempts.
  3. Source code review combined with automated testing, including fuzzing.
  4. Testing every input surface: parameters, headers, the URL, cookies and structured bodies.
Show the answer

Answer: C. Source code review combined with automated testing, including fuzzing.
D. Testing every input surface: parameters, headers, the URL, cookies and structured bodies.

OWASP says detection is best achieved by combining source code review with automated testing including fuzzing of all parameters, headers, URL, cookies and structured data inputs.

Source: OWASP Top 10 A05:2025 (OWASP) — OWASP Top 10:2025 A05 Injection > Description

Challenge yourself on this topic → Study as cards