ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

The GNU GPLv3 is a copyleft license that requires any derivative work incorporating GPL-licensed code to be distributed under the GPL and accompanied by complete, buildable source. Continuing to ship a closed-source product with the GPL library (even with a mere attribution notice) or distributing only binaries would still violate the license. Releasing the entire product under the GPL would satisfy the license but conflicts with management's goal to keep the code proprietary. The practical way to preserve functionality while avoiding the copyleft obligation is to replace the GPL component with an alternative library published under a permissive license such as MIT or BSD, whose terms allow inclusion in proprietary software without source-code disclosure.