Câu 7: CT-SEC: Certified Tester Security Tester

Background:CAPTCHA stands for Completely Automated Public Turing Test to Tell Computers and Humans Apart. A CAPTCHA is a program that protects websites against bots by generating and grading tests that humans can pass but current computer programs cannot. For example, humans can read distorted text, but current computer programs cannot.Scenario:A web application available for mobile devices provides value-added services upon free registration of future users. This application provides a series of free and other paid services. The project’s security manager has proposed to include a CAPTCHA during the registration process.Question:Which ONE of the following objectives of security tests for this feature is CORRECT?

1. A. When a tool is used to try to bypass the CAPTCHA, it checks the vulnerability of the software system in terms of mass account creation requests. — đáp án hiện tại
2. B. By testing the CAPTCHA on both mobile and web, ensure that CAPTCHA works on both types of systems.
3. C. CAPTCHA is a proven technology and no security testing may need to be performed for it.
4. D. If CAPTCHA works correctly, then bypassing it using a tool is not a security test because it is a CAPTCHA library problem and not an application security vulnerability.