GIAC

GWAPT · Question #80

A web application you are testing uses HTTP instead of HTTPS for login pages. What should you recommend?

The correct answer is A. Implement HTTPS with SSL/TLS encryption. See the full explanation below for the reasoning.

Question

A web application you are testing uses HTTP instead of HTTPS for login pages. What should you recommend?

Options

AImplement HTTPS with SSL/TLS encryption
BUse CAPTCHA to secure the login form
CBlock all user login attempts until the issue is resolved
DImplement IP restrictions for login access

How the community answered

(17 responses)

A
71% (12)
B
6% (1)
C
18% (3)
D
6% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GWAPT Practice