A Penetration Tester Who Is Conducting a Web-Application Test Discovers

question 60

Multiple Choice

A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial data. Which of the following should the tester do with this information to make this a successful exploit?

• A) Perform XSS.
• B) Conduct a watering-hole attack.
• C) Use BeEF.
• D) Use browser autopwn.

---

Definitions:

Negation

The grammatical or logical operation whereby a proposition or expression is made negative, denying its content.

Order of Operations

A set of rules used in math to determine the sequence in which operations should be performed.

Circular References

A situation in formulas where a reference is made back to the original cell, potentially causing an error or infinite loop.

Direct Circular References

An error condition in formulas where two or more elements reference each other in a loop, causing a calculation problem.