The security team reviews a web server for XSS and runs the following Nmap scan: Which of the following most accurately describes the result of the scan?
A.
An output of characters > and " as the parameters used m the attempt
B.
The vulnerable parameter ID http://172.31.15.2/1.php?id-2 and unfiltered characters returned
C.
The vulnerable parameter and unfiltered or encoded characters passed > and " as unsafe
D.
The vulnerable parameter and characters > and " with a reflected XSS attempt
I was originally going to go with B, but the syntax of the parameter is incorrect at the end (has id-2 and not id=2) which negated this choice as a potentially valid answer. This would make D the only viable correct answer.
Answer C focuses on identifying the vulnerability and the unsafe handling of characters, but does not go as far as to indicate an active exploit attempt. It’s more about describing the vulnerability itself.
Answer D goes further by implying that the unfiltered characters (>, ") are part of a reflected XSS attack, indicating that the vulnerability has been or can be actively exploited.
Answer is C *ChatGPT-4o
This option accurately describes the issue identified by the scan, which is that the characters > and " are being reflected in the response from the server without proper filtering or encoding. This indicates a potential reflected XSS vulnerability.
it is mentioned that it is reflected in the output
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.CS0-003 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Narobi
Highly Voted 1 year, 5 months agoNarobi
1 year, 4 months agocy_analyst
Most Recent 6 months, 3 weeks agosigmarseifer
11 months, 3 weeks agokumax
1 year, 6 months agoms123451
1 year, 8 months ago