A penetration tester has been asked to conduct a penetration test on a REST-based web service. Which of the following items is required?
A) The latest vulnerability scan results
B) A list of sample application requests
C) An up-to-date list of possible exploits
D) A list of sample test accounts

Question

Quizplus · Accepted Answer

A list of sample application requests is required to understand how the REST-based web service operates and to craft appropriate test cases for the penetration test.

A Penetration Tester Has Been Asked to Conduct a Penetration