nerdexam
GIAC

GPEN · Question #349

Anonymizers are the services that help make a user's own Web surfing anonymous. An anonymizer removes all the identifying information from a user's computer while the user surfs the Internet. It…

The correct answer is A. Java applications B. Secure protocols C. ActiveX controls D. JavaScript E. Plugins. Anonymizers cannot fully protect user privacy when technologies like Java, ActiveX, JavaScript, plugins, or secure protocols are in use, because these can either bypass the anonymizer or independently reveal identifying information.

Penetration Testing Foundations & Reconnaissance

Question

Anonymizers are the services that help make a user's own Web surfing anonymous. An anonymizer removes all the identifying information from a user's computer while the user surfs the Internet. It ensures the privacy of the user in this manner. After the user anonymizes a Web access with an anonymizer prefix, every subsequent link selected is also automatically accessed anonymously. Which of the following are limitations of anonymizers? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AJava applications
  • BSecure protocols
  • CActiveX controls
  • DJavaScript
  • EPlugins

How the community answered

(60 responses)
  • A
    100% (60)

Why each option

Anonymizers cannot fully protect user privacy when technologies like Java, ActiveX, JavaScript, plugins, or secure protocols are in use, because these can either bypass the anonymizer or independently reveal identifying information.

AJava applicationsCorrect

Java applications can make direct network connections outside the anonymizer proxy, leaking the user's real IP address and identity.

BSecure protocolsCorrect

Secure protocols (such as HTTPS with client certificates) may transmit identifying credentials or establish direct encrypted tunnels that the anonymizer cannot inspect or strip.

CActiveX controlsCorrect

ActiveX controls can execute code at the OS level and make direct network calls that bypass the anonymizer entirely, exposing the user's real identity.

DJavaScriptCorrect

JavaScript can retrieve and transmit client-side information such as browser fingerprints, timezone, and screen resolution directly to servers, circumventing anonymizer protections.

EPluginsCorrect

Browser plugins (Flash, Java applets, etc.) operate outside normal HTTP request flows and can establish independent connections that are not routed through the anonymizer.

Concept tested: Anonymizer limitations and identity-leaking bypass vectors

Topics

#anonymizers#web privacy#Java applets#ActiveX controls

Community Discussion

No community discussion yet for this question.

Full GPEN Practice