A Company Contracts a Security Engineer to Perform a Penetration

question 237

Multiple Choice

A company contracts a security engineer to perform a penetration test of its client-facing web portal. Which of the following activities would be MOST appropriate?

• A) Use a protocol analyzer against the site to see if data input can be replayed from the browser
• B) Scan the website through an interception proxy and identify areas for the code injection
• C) Scan the site with a port scanner to identify vulnerable services running on the web server
• D) Use network enumeration tools to identify if the server is running behind a load balancer

---

Definitions:

Work in Process Inventory

Goods that are partially completed in the manufacturing process but are not yet ready for sale.

Factory Wages Payable

The amount owed to factory workers for labor that has not yet been paid.

Direct Labor Costs

Direct labor costs involve the expenditure or expense directly linked to the remuneration of employees who are engaged in the hands-on production of goods or services.

Predetermined Overhead Rate

An estimated overhead rate used to allocate manufacturing overhead costs to products or job orders based on a selected activity base, such as direct labor hours.