A Penetration Tester Is Performing a Black-Box Test of a Client

question 43

Multiple Choice

A penetration tester is performing a black-box test of a client web application, and the scan host is unable to access it. The client has sent screenshots showing the system is functioning correctly. Which of the following is MOST likely the issue?

• A) The penetration tester was not provided with a WSDL file.
• B) The penetration tester needs an OAuth bearer token.
• C) The tester has provided an incorrect password for the application.
• D) An IPS/WAF whitelist is in place to protect the environment.

---

Definitions:

Financial Statements

Official records that detail the financial activities and condition of a business, organization, or individual, typically including balance sheet, income statement, and statement of cash flows.

Retained Earnings

The portion of a company's profits kept in the business after dividends are paid to shareholders, used for reinvestment or to pay off debt.

Non-controlling Interest

An ownership interest in a corporation where the percentage of shares owned does not give the shareholder the control of the company.

Debit Entry

An accounting entry that increases an asset or expense account, or decreases a liability or equity account.