A Penetration Tester Is Performing a Black-Box Test of a Client

question 43

Multiple Choice

A penetration tester is performing a black-box test of a client web application, and the scan host is unable to access it. The client has sent screenshots showing the system is functioning correctly. Which of the following is MOST likely the issue?

• A) The penetration tester was not provided with a WSDL file.
• B) The penetration tester needs an OAuth bearer token.
• C) The tester has provided an incorrect password for the application.
• D) An IPS/WAF whitelist is in place to protect the environment.

---

Definitions:

Interest Revenue

Income earned from lending funds or investing in interest-bearing financial assets.

Retained Earnings

The portion of a company's profit that is held or retained and not paid out as dividends to shareholders, used for reinvestment in the business, to pay debt, or to buy back shares.

Ending Inventory

Represents the value of goods available for sale at the close of an accounting period, calculated by adding purchases to beginning inventory and subtracting cost of goods sold.

Accounts Payable

Financial obligations or debts that a company owes to its suppliers or creditors for goods and services received but not yet paid for.