An engineer, who is conducting a penetration test for a web application, discovers the user login process sends from field data using the HTTP GET method. To mitigate the risk of exposing sensitive information, the form should be sent using an:
A) HTTP POST method.
B) HTTP OPTIONS method.
C) HTTP PUT method.
D) HTTP TRACE method.

Question

Quizplus · Accepted Answer

The HTTP POST method is used to send data to the server in a more secure manner than GET, as it does not append data to the URL, thus reducing the risk of exposing sensitive information in the URL.

An Engineer, Who Is Conducting a Penetration Test for a Web