Exam 312-50v11 topic 1 question 385 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 385
Topic #: 1

Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to test for any security loopholes by hijacking a session between a client and server. This tool has a feature of intercepting proxy that can be used to inspect and modify the traffic between the browser and target application. This tool can also perform customized attacks and can be used to test the randomness of session tokens.
Which of the following tools is used by Gregory in the above scenario?

A. Wireshark
B. Nmap
C. Burp Suite
D. CxSAST

Show Suggested Answer

Suggested Answer: C 🗳️

by jinjection at Sept. 28, 2021, 9:54 a.m.

Comments

Submit Cancel

jinjection

Highly Voted 1 year, 7 months ago

correct

upvoted 5 times

...

Daniel8660

Most Recent 7 months ago

Selected Answer: C

WebSite Footprinting Tools：Burp Suite Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work together to support the entire testing process, from initial mapping and analysis of an application's attack surface to finding and exploiting security vulnerabilities. Burp Proxy allows attackers to intercept all requests and responses between the browser and the target web application and obtain information such as web server used, its version, and web-application-related vulnerabilities. (P.190/174)

upvoted 3 times

...

Inumike

1 year, 1 month ago

Burpsuite is a proxy interceptor

upvoted 3 times

...

Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam

Exam 312-50v11 topic 1 question 385 discussion

Comments

jinjection

Daniel8660

Inumike

SY0-701