Câu 87: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

An internal penetration tester was assessing a recruiting page for potential issues before it was pushed to the production website. The penetration tester discovers an issue that must be corrected before the page goes live. The web host administrator collects the log files below and gives them to the development team so improvements can be made to the security design of the website. Which of the following types of attack vectors did the penetration tester use?

1. A. SQL injection
2. B. CSRF — đáp án hiện tại
3. C. Brute force
4. D. XSS
5. E. TOC/TOU