Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It's a big mistake that store clear credential in the database. So there are two issues: 1. store credential in database; 2. caused data to be retrieved by http request. I am hesitate between B and C. But I think the 1. is more dangous.
I feel like you are correct but, he was only able to get the credentials because of the vulnerability in the form itself.
To remediate the vulnerability where a penetration tester was able to retrieve user credentials by submitting data to a form in a web application, the recommended action is: C. Performing input validation before allowing submission Explanation: Input validation is a critical security measure to prevent various types of web application attacks, including SQL injection, cross-site scripting (XSS), and data manipulation. It helps ensure that user inputs are sanitized and do not contain malicious or unexpected data.