LO2 SR

Select an answer that is not true about AppScan?

• AppScan is an application development tool

• AppScan is  a mobile application testing tool

• AppScan is a desktop application testing tool

• AppScan is a web application testing tool.

Which XSS will not perform

• Check for authentication issues

• Check the vulnerability of a website on script injection

• Check for SQL related attacks

• Check for cross site forgery issues.

In web application landscape, web servers are part of ________ tier.

• Client

• Middle

• Data

• Backend

What is a cookie

• A stored file in local computer

• A stored script in the server

• A stored piece of data in local computer

• A stored procedure in the database

What is the recommended maximum number of pages that you scan with a single configuration?

• 500

• 300

• 200

• 600

A hacker enters the following script into the search box or an entry form: <Script>’t

Worked”</Script>. The hacker then clicks the search button and a pop-up window appears stating it Worked. What you conclude from this?

• The site is susceptible to buffer overflow

• The site is susceptible to SQL injection

• The site is susceptible to parameter tampering

• The site is susceptible to XSS