An Engineer, Who Is Conducting a Penetration Test for a Web

question 35

Multiple Choice

An engineer, who is conducting a penetration test for a web application, discovers the user login process sends from field data using the HTTP GET method. To mitigate the risk of exposing sensitive information, the form should be sent using an:

• A) HTTP POST method.
• B) HTTP OPTIONS method.
• C) HTTP PUT method.
• D) HTTP TRACE method.

---

Definitions:

Treasury Bills

Short-term debt obligations issued by the government to finance its operations, with maturities ranging from a few days to one year.

Mutual Mistake

A legal concept where both parties involved in an agreement have a misunderstanding regarding a critical fact of the agreement.

Reasonable Person Test

In a negligence action, the judicial standard of socially acceptable behavior; the standard used to determine the existence of apparent authority of an agent.

Meeting of the Minds

An agreement between parties on the terms of a contract, demonstrating mutual consent and understanding.