اضغط هنا للانضمام الى قروب فوجي للإختبارات على تيليقرام

اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 328 من 1101

كل الأسئلة

A security analyst recently used Arachni to perform a vulnerability assessment of a newly developed web application. The analyst is concerned about the following output:
[+] XSS: In form input 'txtSearch' with action https://localhost/search.aspx
[-] XSS: Analyzing response #1...
[-] XSS: Analyzing response #2...
[-] XSS: Analyzing response #3...
[+] XSS: Response is tainted. Looking for proof of the vulnerability.
Which of the following is the most likely reason for this vulnerability?

الخيارات

  • A The developer set input validation protection on the specific field of search.aspx.
  • B The developer did not set proper cross-site scripting protections in the header.
  • C The developer did not implement default protections in the web application build.
  • D The developer did not set proper cross-site request forgery protections.

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.