CompTIA
CAS-002 · Question #807
CAS-002 Question #807: Real Exam Question with Answer & Explanation
Sign in or unlock CAS-002 to reveal the answer and full explanation for question #807. The question stem and answer options stay visible for context.
Question
Ann is testing the robustness of a marketing website through an intercepting proxy. She has intercepted the following HTTP request: POST /login.aspx HTTP/1.1 Host: comptia.org Content-type: text/html txtUsername=ann&txtPassword=ann&alreadyLoggedIn=false&submit=true Which of the following should Ann perform to test whether the website is susceptible to a simple authentication bypass?
Options
- ARemove all of the post data and change the request to /login.aspx from POST to GET
- BAttempt to brute force all usernames and passwords using a password cracker
- CRemove the txtPassword post data and change alreadyLoggedIn from false to true
- DRemove the txtUsername and txtPassword post data and toggle submit from true to false
Unlock CAS-002 to see the answer
You've previewed enough free CAS-002 questions. Unlock CAS-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.