Câu 105: PT0-003: CompTIA PenTest+

A penetration tester is performing an assessment focused on attacking the authentication identity provider hosted within a cloud provider. During the reconnaissance phase, the tester finds that the system is using OpenID connect with OAuth and has dynamic registration enabled. Which of the following attacks should the tester try first?

1. A. A password-spraying attack against the authentication system
2. B. A brute-force attack against the authentication system
3. C. A replay attack against the authentication flow in the system — đáp án hiện tại
4. D. A mask attack against the authentication system