A security analyst is inspecting pseudocode of the following multithreaded application: 1. perform daily ETL of data 1.1 validate that yesterday's data model file exists 1.2 validate that today's data model file does not exist 1.2 extract yesterday's data model 1.3 transform the format 1.4 load the transformed data into today's data model file 1.5 exit Which of the following security concerns is evident in the above pseudocode?
A) Time of check/time of use
B) Resource exhaustion
C) Improper storage of sensitive data
D) Privilege escalation

Question

Quizplus · Accepted Answer

The pseudocode checks for the existence of files before performing operations on them, which can lead to a time of check/time of use (TOC/TOU) race condition if the file state changes between the check and the use.

A Security Analyst Is Inspecting Pseudocode of the Following Multithreaded