A Penetration Tester Is Testing a Web Application and Is

question 90

Multiple Choice

A penetration tester is testing a web application and is logged in as a lower-privileged user. The tester runs arbitrary JavaScript within an application, which sends an XMLHttpRequest, resulting in exploiting features to which only an administrator should have access. Which of the following controls would BEST mitigate the vulnerability?

• A) Implement authorization checks.
• B) Sanitize all the user input.
• C) Prevent directory traversal.
• D) Add client-side security controls

---

Definitions:

High-dose Condition

A scenario or study setup where subjects are exposed to a large quantity of a substance or stimulus.

Alcohol

A psychoactive substance commonly found in beverages such as beer, wine, and spirits, known for its depressive effects on the central nervous system.

Perception

The process of organizing, interpreting, and making sense of sensory information to represent and understand the environment.

Independent Variable

In an experimental setting, the variable that is manipulated by the researcher to observe its effect on the dependent variable.