Before beginning to test the application, which of the following should the assessor request from the organization?

A security assessor is attempting to craft specialized XML files to test the security of the parsing functions during ingest into a Windows application.

Before beginning to test the application, which of the following should the assessor request from the organization?
A . Sample SOAP messages
B . The REST API documentation
C . A protocol fuzzing utility
D . An applicable XSD file

View Answer

Answer: D