CompTIA
CAS-003 · Question #120
A new web based application has been developed and deployed in production. A security engineer decides to use an HTTP interceptor for testing the application. Which of the following problems would…
The correct answer is A. The tool could show that input validation was only enabled on the client side. A HTTP Interceptor is a program that is used to assess and analyze web traffic thus it can be used to indicate that input validation was only enabled on the client side.
Technical Integration of Enterprise Security
Question
A new web based application has been developed and deployed in production. A security engineer decides to use an HTTP interceptor for testing the application. Which of the following problems would MOST likely be uncovered by this tool?
Options
- AThe tool could show that input validation was only enabled on the client side
- BThe tool could enumerate backend SQL database table and column names
- CThe tool could force HTTP methods such as DELETE that the server has denied
- DThe tool could fuzz the application to determine where memory leaks occur
How the community answered
(42 responses)- A83% (35)
- B5% (2)
- C10% (4)
- D2% (1)
Explanation
A HTTP Interceptor is a program that is used to assess and analyze web traffic thus it can be used to indicate that input validation was only enabled on the client side.
Topics
#HTTP interceptor#client-side validation#web application testing#input validation bypass
Community Discussion
No community discussion yet for this question.