exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 266 discussion

Actual exam question from CompTIA's CAS-004
Question #: 266
Topic #: 1
[All CAS-004 Questions]

A penetration tester is testing a company’s login form for a web application using a list of known usernames and a common password list. According to a brute-force utility, the penetration tester needs to provide the tool with the proper headers, POST URL with variable names, and the error string returned with an improper login. Which of the following would BEST help the tester to gather this information? (Choose two.)

  • A. The new source feature of the web browser
  • B. The logs from the web server
  • C. The inspect feature from the web browser
  • D. A tcpdump from the web server
  • E. An HTTP interceptor
  • F. The website certificate viewed via the web browser
Show Suggested Answer Hide Answer
Suggested Answer: CE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
darkdumper
9 months, 3 weeks ago
Selected Answer: CE
Correct CE.
upvoted 4 times
...
Amin4799
10 months, 2 weeks ago
Selected Answer: CE
CE look good
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...