Questions

1. Which one of the following does not apply to white-box scanning?
   • Web UI testing
   • Privacy scanning PII
   • Secure code scanning
2. What is the objective of PII discovery?
   • To discern the types of PII
   • To see how the PII is classified
   • All of above
3. What is the regular expression for IP address?
   • /([a-z0-9_\-.+]+)@\w+(\.\w+)*
   • \d{4}[ -]?\d{4}[ -]?\d{4}[ -]?\d{4}|\d{4}[ -]?\d{6}[ -]?\d{4}\d?
   • \b(?:\d{1,3}\.){3}\d{1,3}\b
4. Why are we looking for Base64 encoding?
   • Any password encoded with Base64 is very vulnerable and can be easily reversed
   • To ensure there is no possibility of injection attack
   • To avoid backdoor connection behavior