CAP Vulnerability Assessment & Penetration Testing 2

Question 1

During a penetration test, a tester discovers that a web application reflects user input directly in HTTP responses without encoding. Which vulnerability class does this represent?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

Reflected XSS occurs when unsanitized user input is echoed back in HTTP responses, allowing script injection in the victim's browser.

Question 2

Which NIST publication provides the primary framework for conducting security assessments and authorizations under the RMF?

Accepted Answer

NIST SP 800-115

Answer

NIST SP 800-115 is the Technical Guide to Information Security Testing and Assessment, specifically covering penetration testing methodologies.

Question 3

A penetration tester uses a tool to automatically map out all hosts, open ports, and services on a target network. What phase of penetration testing does this represent?

Accepted Answer

Reconnaissance and Discovery

Answer

Reconnaissance and discovery involves active scanning to enumerate hosts, ports, and services on the target network.

Question 4

What distinguishes a vulnerability scan from a penetration test in the context of federal system assessments?

Accepted Answer

Penetration tests actively attempt to exploit vulnerabilities while scans only identify them

Answer

Penetration tests go beyond identification by actively attempting to exploit vulnerabilities to demonstrate actual impact and risk.

Question 5

Under the CAP framework, who is ultimately responsible for authorizing penetration testing activities on a federal information system?

Accepted Answer

The Authorizing Official (AO)

Answer

The Authorizing Official has the authority and accountability to accept risk, including approving assessment activities like penetration testing.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Vulnerability Assessment & Penetration Testing 2