A Penetration Tester Is Testing a Web Application and Is

question 90

Multiple Choice

A penetration tester is testing a web application and is logged in as a lower-privileged user. The tester runs arbitrary JavaScript within an application, which sends an XMLHttpRequest, resulting in exploiting features to which only an administrator should have access. Which of the following controls would BEST mitigate the vulnerability?

• A) Implement authorization checks.
• B) Sanitize all the user input.
• C) Prevent directory traversal.
• D) Add client-side security controls

---

Definitions:

Exhibits

Displays or presentations, often in museums or galleries, that showcase art, historical items, or scientific concepts to the public.

Correct Verb

Selecting and using the appropriate verb form in a sentence to match the subject and tense.

Correct Verb

The use of an appropriate action word in a sentence that accurately aligns with the subject and tense.

First Month's Rent

The initial payment required before moving into a rental property, typically equal to one month's rent.