A security analyst in an insurance company is assigned to test a new web application that will be used by clients to help them choose and apply for an insurance plan. The analyst discovers that the application is developed in ASP scripting language and it uses MSSQL as a database backend. The analyst locates the application's search form and introduces the following code in the search input fielD.IMG SRC=vbscript:msgbox("Vulnerable");> originalAttribute="SRC" originalPath="vbscript:msgbox("Vulnerable");>"When the analyst submits the form, the browser returns a pop-up window that says "Vulnerable". Which web applications vulnerability did the analyst discover?
Answer(s): C
While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site.<script>alert(" Testing Testing Testing ")</script>Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text: "Testing Testing Testing". Which vulnerability has been detected in the web application?
Answer(s): D
A hacker was able to sniff packets on a company's wireless network. The following information was discovered.The Key 10110010 01001011The Cyphertext 01100101 01011010Using the Exlcusive OR, what was the original message?
Answer(s): B
International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining
Answer(s): A
Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?
Post your Comments and Discuss GAQM CPEH-001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CPEH-001 content, but please register or login to continue.