A Penetration Tester Notices That the X-Frame-Options Header on a Web

question 122

Multiple Choice

A penetration tester notices that the X-Frame-Options header on a web application is not set. Which of the following would a malicious actor do to exploit this configuration setting?

• A) Use path modification to escape the application's framework.
• B) Create a frame that overlays the application.
• C) Inject a malicious iframe containing JavaScript.
• D) Pass an iframe attribute that is malicious.

---

Definitions:

Sodium-Potassium Pump

A membrane-bound ATPase enzyme that pumps sodium out of cells while moving potassium into cells, crucial for maintaining cellular ion balance and membrane potential.

Plasma Membrane

A bi-layer of lipids and proteins that surrounds a cell, controlling the passage of substances in and out of the cell.

Membrane Potential

The electrical potential difference across a cell's plasma membrane, vital for the conduction of nerve impulses, muscle contraction, and transport processes.

Depolarization

A decrease in membrane potential that makes the interior of a cell less negative compared to the outside, crucial for nerve impulse transmission and muscle contractions.