Open-source scanning is the best method for identifying vulnerabilities introduced by third-party libraries early in the SDLC. Modern applications often depend on external packages, frameworks, and open-source components. These dependencies can contain known vulnerabilities, outdated versions, insecure licenses, or transitive dependency risks. Open-source scanning, also called software composition analysis, checks dependency manifests and package versions against vulnerability databases so teams can fix issues before deployment. Penetration testing happens later and tests running systems, so it is less suited for early dependency detection. Static code analysis reviews source code for insecure patterns but may not fully evaluate third-party library risk. Bug bounty programs occur after release and rely on external researchers.
Early third-party dependency risk is best handled with open-source scanning.

Detailed Explanation:
Tokenization replaces sensitive data with non-sensitive surrogate values that retain the necessary format but are meaningless without access to the original data. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 3: Security Architecture, Section: "Data Masking and Tokenization".

The log entries clearly show an attacker attempting to access sensitive system files by manipulating the filename parameter. The use of ../../../ is a classic indicator of a directory traversal attack, also called path traversal. This technique is used to move outside the intended web directory and access restricted locations on the server's filesystem.
In this case, the attacker is attempting to read:
/etc/passwd - contains user account information
/etc/shadow - contains hashed password entries and is even more sensitive The CompTIA Security+ SY0-701 exam describes directory traversal as an attack where unvalidated user input allows navigation to system directories, often using sequences like ../ to bypass file path restrictions.
This is exactly what is shown in the logs.
File injection (A) would involve inserting malicious files or code, not reading system files.
Privilege escalation (B) requires exploiting a system to gain higher privileges, not just reading files.
Cookie forgery (D) involves manipulating session cookies and does not match the observed behavior.
Because the attacker is using path traversal patterns to access protected files, the correct answer is C.
Directory traversal.

Side loading is the process of installing software outside of a manufacturer's approved software repository.
This can expose the device to potential vulnerabilities, such as malware, spyware, or unauthorized access.
Side loading can also bypass security controls and policies that are enforced by the manufacturer or the organization. Side loading is often done by users who want to access applications or features that are not available or allowed on their devices. References = Sideloading - CompTIA Security + Video Training | Interface Technical Training, Security+ (Plus) Certification | CompTIA IT Certifications, Load Balancers - CompTIA Security+ SY0-501 - 2.1, CompTIA Security+ SY0-601 Certification Study Guide.