A Security Administrator Is Investigating Many Recent Incidents of Credential

question 1039

Multiple Choice

A security administrator is investigating many recent incidents of credential theft for users accessing the company's website, despite the hosting web server requiring HTTPS for access. The server's logs show the website leverages the HTTP POST method for carrying user authentication details. Which of the following is the MOST likely reason for compromise?

• A) The HTTP POST method is not protected by HTTPS.
• B) The web server is running a vulnerable SSL configuration.
• C) The HTTP response is susceptible to sniffing.
• D) The company doesn't support DNSSEC.

---

Definitions:

Drives

Internal motivational states created by physiological needs, which direct behavior to fulfill those needs.

Biopsychosocial Model

An interdisciplinary model that looks at the interconnection between biology, psychology, and socio-environmental factors in understanding health and illness.

Diathesis-Stress Model

A psychological theory that explains behavior as a predispositional vulnerability together with stress from life experiences.

Medical Model

A framework for understanding diseases and disorders by focusing on biological factors and excluding psychological, environmental, and social influences.