An Internal Penetration Tester Finds a Legacy Application That Takes

question 423

Multiple Choice

An internal penetration tester finds a legacy application that takes measurement input made in a text box and outputs a specific string of text related to industry requirements. There is no documentation about how this application works, and the source code has been lost. Which of the following would BEST allow the penetration tester to determine the input and output relationship?

• A) Running an automated fuzzer
• B) Constructing a known cipher text attack
• C) Attempting SQL injection commands
• D) Performing a full packet capture
• E) Using the application in a malware sandbox

---

Definitions:

GDP

Gross Domestic Product, a measure of the total economic output of a country within a specific time period.

Net Exports

The difference between a country's total value of exports and its total value of imports.

Economic Well-Being

The level of prosperity and standard of living enjoyed by an individual, group, or nation, often measured through indicators like income, poverty rates, and unemployment.

GDP Deflator

A metric for assessing the price rates of all freshly created, domestic final goods and services in an economy.