A Penetration Test Is Being Scoped for a Set of Web

question 78

Multiple Choice

A penetration test is being scoped for a set of web services with API endpoints. The APIs will be hosted on existing web application servers. Some of the new APIs will be available to unauthenticated users, but some will only be available to authenticated users. Which of the following tools or activities would the penetration tester MOST likely use or do during the engagement? (Select TWO.)

• A) Static code analyzer
• B) Intercepting proxy
• C) Port scanner
• D) Reverse engineering
• E) Reconnaissance gathering
• F) User acceptance testing

---

Definitions:

Long Years Of Education

Extended periods spent in formal educational institutions leading to higher levels of academic or professional qualification.

Satisfying Occupation

A job or career that provides fulfillment, meaning, and pleasure to the individual, often aligning with their interests, values, and capabilities, contributing to their overall happiness and well-being.

Use Of Force

The application of physical coercion by individuals or authorities to achieve a directive, which can range from law enforcement to personal defense.

Signals Weakness

Indicates moments or actions that reveal a lack of strength, confidence, or effectiveness.