During user acceptance testing, the security administrator believes to have discovered an issue in the login prompt of the company's financial system. While entering the username and password, the…

Question

Options

• AThe administrator should enter a username and use an offline password cracker in brute force mode.
• BThe administrator should use a network analyzer to determine which packet caused the system to
• CThe administrator should extract the password file and run an online password cracker in brute force
• DThe administrator should run an online fuzzer against the login screen.

• A
  3% (1)
• B
  3% (1)
• C
  5% (2)
• D
  90% (36)

Explanation

The crash occurred when a field was mistyped - meaning unexpected or malformed input caused the application to fail (likely a buffer overflow or unhandled input condition). Fuzzing is the technique of systematically feeding unexpected, random, or boundary-condition inputs into an application to trigger crashes and uncover input validation flaws. An online fuzzer targeting the login screen will reproduce the crash by replicating the class of malformed input that originally caused it. The other options (offline password crackers, network analyzers, password file extraction) are authentication-focused tools that address credential attacks, not application crash reproduction.

No community discussion yet for this question.