ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ75

VerifiedWeb Application Penetration Testing Methodology

After investing in their startup company, Zamtac Ltd., Allen and Greg developed a new web application for the company. Before hosting it, they want to test the developed web application's robustness and resistance to attacks such as buffer overflow, DOS, XSS, and SQL injection.

What type of web application security test should Allen and Greg perform?

Explanation

Web fuzzing tests an application's robustness by supplying unexpected, malformed, and potentially malicious input to expose security weaknesses and failure conditions, including vulnerabilities related to buffer overflows, denial-of-service, XSS, and SQL injection.

Community Discussion

No comments yet. Be the first to start the discussion!