A Penetration Test Is Being Scoped for a Set of Web

question 300

Multiple Choice

A penetration test is being scoped for a set of web services with API endpoints. The APIs will be hosted on existing web application servers. Some of the new APIs will be available to unauthenticated users, but some will only be available to authenticated users. Which of the following tools or activities would the penetration tester MOST likely use or do during the engagement? (Choose two.)

• A) Static code analyzer
• B) Intercepting proxy
• C) Port scanner
• D) Reverse engineering
• E) Reconnaissance gathering
• F) User acceptance testing

---

Definitions:

Random Error Term

A variable in statistical models that represents unexplained or random fluctuations in the observed data, not accounted for by the explanatory variables.

Values

Principles, standards, or qualities considered inherently important or desirable in a certain context.

Correlation Analysis

A statistical method used to evaluate the strength and direction of the linear relationship between two quantitative variables.

Scatter Diagram

A graphical representation used to visualize the relationship between two quantitative variables.