CompTIA Exam PT0-001 Topic 2 Question 9 Discussion

Actual exam question for CompTIA's PT0-001 exam

Question #: 9
Topic #: 2

A penetration tester is testing a web application and is logged in as a lower-privileged user. The tester runs arbitrary JavaScript within an application, which sends an XMLHttpRequest, resulting in exploiting features to which only an administrator should have access.

Which of the following controls would BEST mitigate the vulnerability?

AImplement authorization checks.

BSanitize all the user input.

CPrevent directory traversal.

DAdd client-side security controls

Show Suggested Answer

Suggested Answer: A

by Andra at May 03, 2022, 07:27 PM

Limited Time Offer

25%

Off

Get Premium PT0-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!