PT0-002 · Question #306
For a penetration test engagement, a security engineer decides to impersonate the IT help desk. The security engineer sends a phishing email containing an urgent request for users to change their pass
Sign in or unlock PT0-002 to reveal the answer and full explanation for question #306. The question stem and answer options stay visible for context.
Question
For a penetration test engagement, a security engineer decides to impersonate the IT help desk. The security engineer sends a phishing email containing an urgent request for users to change their passwords and a link to https://example.com/index.html. The engineer has designed the attack so that once the users enter the credentials, the index.html page takes the credentials and then forwards them to another server that the security engineer is controlling. Given the following information:
Which of the following lines of code should the security engineer add to make the attack successful?
Exhibit
Options
- Awindow.location.= 'https://evilcorp.com'
- BcrossDomain: true
- Cgeturlparameter ('username')
- DredirectUrl = 'https://example.com'
Unlock PT0-002 to see the answer
You've previewed enough free PT0-002 questions. Unlock PT0-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.