A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application…

The correct answer is A. Sample SOAP messages. SOAP Simple Object Access Protocol is an API standard that relies on XML and related schemas. XML-based specifications are governed by XML Schema Definition (XSD) documents. Having a good reference of what a specific API supports can be valuable for a penetration tester. This…

Vulnerability discovery and analysis

Question

A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application. Before beginning to test the application, which of the following should the assessor request from the organization?

Options

ASample SOAP messages
BThe REST API documentation
CA protocol fuzzing utility
DAn applicable XSD file

How the community answered

(25 responses)

A
72% (18)
B
8% (2)
C
4% (1)
D
16% (4)

Explanation

SOAP Simple Object Access Protocol is an API standard that relies on XML and related schemas. XML-based specifications are governed by XML Schema Definition (XSD) documents. Having a good reference of what a specific API supports can be valuable for a penetration tester. This question specifically asks about XML files, so the SOAP project files would be the most

Topics

#XML parsing#SOAP messages#web application testing#input validation

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice