A Penetration Tester Is Testing a Web Application That Is

question 39

Multiple Choice

A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able to query the provider's metadata and get the credentials used by the instance to authenticate itself. Which of the following vulnerabilities has the tester exploited?

• A) Cross-site request forgery
• B) Server-side request forgery
• C) Remote file inclusion
• D) Local file inclusion

---

Definitions:

Dialogue

A conversation or exchange of ideas between two or more individuals aimed at reaching a mutual understanding or solving a problem.

Proxemics

The study of human use of space and the effects that population density has on behavior, communication, and social interaction.

Paralinguistics

The aspect of communication that involves non-verbal cues in speech, such as tone, pitch, loudness, and rate of speech.

Kinesics

The study of body movements, facial expressions, and gestures as a means of communication.