A penetration tester has been asked to conduct a penetration test on a REST-based web service. Which of the following items is required?

The correct answer is B. A list of sample application requests. When performing a penetration test on a REST-based web service, sample application requests are essential. REST APIs are defined by their endpoints, HTTP methods (GET, POST, PUT, DELETE), headers, authentication tokens, and request body formats. Without sample requests, a…

Information Gathering and Vulnerability Scanning

Question

Options

AThe latest vulnerability scan results
BA list of sample application requests
CAn up-to-date list of possible exploits
DA list of sample test accounts

How the community answered

(37 responses)

A
8% (3)
B
86% (32)
C
5% (2)

Explanation

When performing a penetration test on a REST-based web service, sample application requests are essential. REST APIs are defined by their endpoints, HTTP methods (GET, POST, PUT, DELETE), headers, authentication tokens, and request body formats. Without sample requests, a tester cannot understand the API's structure, parameters, or authentication mechanisms. Vulnerability scan results (A) and exploit lists (C) are useful but not specifically required to understand a REST service. Test accounts (D) may help but are secondary - the tester must first understand what requests the API accepts before they can probe it for weaknesses.

Topics

#REST API testing#Penetration test prerequisites#Information gathering#Web services security

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice