nerdexam
GIAC

GCIH · Question #107

Adam, a novice web user, is very conscious about the security. He wants to visit the Web site that is known to have malicious applets and code. Adam always makes use of a basic Web Browser to…

The correct answer is C. Lynx. Lynx is a text-only web browser that does not support JavaScript, Java applets, or other active web technologies, making it inherently safe for browsing sites known to contain malicious code.

Web Application Attacks & Post-Exploitation

Question

Adam, a novice web user, is very conscious about the security. He wants to visit the Web site that is known to have malicious applets and code. Adam always makes use of a basic Web Browser to perform such testing. Which of the following web browsers can adequately fill this purpose?

Options

  • AMozilla Firefox
  • BInternet explorer
  • CLynx
  • DSafari

How the community answered

(20 responses)
  • A
    10% (2)
  • C
    85% (17)
  • D
    5% (1)

Why each option

Lynx is a text-only web browser that does not support JavaScript, Java applets, or other active web technologies, making it inherently safe for browsing sites known to contain malicious code.

AMozilla Firefox

Mozilla Firefox is a full-featured browser with a JavaScript engine and plugin support, meaning it can execute malicious scripts and applets present on dangerous websites.

BInternet explorer

Internet Explorer supports JavaScript, ActiveX, and VBScript, all of which are common vectors for malicious web-based code execution.

CLynxCorrect

Lynx renders only plain HTML text and does not execute JavaScript, Java applets, ActiveX controls, Flash, or any other active client-side content. Because the vast majority of malicious web payloads rely on these scripting and plugin technologies to execute, Lynx provides natural isolation from them. This makes Lynx an appropriate tool for a security tester who needs to inspect a dangerous site without risking code execution.

DSafari

Safari is a full-featured browser with a JavaScript engine that can process and execute client-side scripts, leaving it susceptible to malicious web content.

Concept tested: Text-based browser to avoid malicious active content

Topics

#malicious applets#Lynx browser#safe browsing#client-side attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice