A Penetration Tester Observes That the Content Security Policy Header

question 19

Multiple Choice

A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?

• A) Command injection attack
• B) Clickjacking attack
• C) Directory traversal attack
• D) Remote file inclusion attack

---

Definitions:

Adolescents

Individuals in the transitional stage of development between childhood and adulthood, typically between the ages of 13 and 19.

Nonindustrialized Cultures

Societies that have not undergone extensive industrialization and often maintain traditional ways of life.

Fluid Intelligence

The ability to think abstractly, reason, identify patterns, and solve problems with new information.

Crystallized Intelligence

Cognitive skills and specific knowledge acquired over a lifetime; it is heavily dependent on education and tends to remain stable over time.