CAS-003 · Question #88
Company XYZ has purchased and is now deploying a new HTML5 application. The company wants to hire a penetration tester to evaluate the security of the client and server components of the proprietary…
The correct answer is C. Local proxy D. Fuzzer. C: Local proxy will work by proxying traffic between the web client and the web server. This is a tool that can be put to good effect in this case. D: Fuzzing is another form of blackbox testing and works by feeding a program multiple input iterations that are specially written…
Question
Company XYZ has purchased and is now deploying a new HTML5 application. The company wants to hire a penetration tester to evaluate the security of the client and server components of the proprietary web application before launch. Which of the following is the penetration tester MOST likely to use while performing black box testing of the security of the company's purchased application? (Select TWO).
Options
- ACode review
- BSandbox
- CLocal proxy
- DFuzzer
- EPort scanner
How the community answered
(41 responses)- A10% (4)
- B2% (1)
- C76% (31)
- E12% (5)
Explanation
C: Local proxy will work by proxying traffic between the web client and the web server. This is a tool that can be put to good effect in this case. D: Fuzzing is another form of blackbox testing and works by feeding a program multiple input iterations that are specially written to trigger an internal error that might indicate a bug and crash
Topics
Community Discussion
No community discussion yet for this question.