CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: C - Web browsers can be configured so that they require confirmation to accept an ActiveX control through the Internet browser options panel.

Key Takeaway: ActiveX is a technology that was implemented by Microsoft to customize controls, icons, and other features, which increases the usability of web-enabled systems. ActiveX runs on the client. It uses a method called Authenticode for security. Authenticode is a type of certificate technology that allows ActiveX components to be validated by a server. ActiveX components are downloaded to the client hard disk, potentially allowing additional security breaches. Web browsers can be configured so that they require confirmation to accept an ActiveX control.