Practical Security Automation and Testing

Questions

1. Which one of the followings is not used for security data payloads source?
   1. FuzzDB
   2. SecLists
   3. CURL
   4. Naughty Strings
2. Which one can be used to send HTTP requests?
   1. JMeter
   2. Python Requests
   3. CURL
   4. All of above
3. Which one of the ZAP-CLI commands can be used to trigger the security assessments?
   1. ZAP-CLI spider
   2. ZAP-CLI quick-scan
   3. ZAP-CLI active-scan
   4. All of above
4. In JMeter, what element is used to read the CSV values?
   1. CSV Data Set Config
   2. HTTP Request
   3. View Results Tree
   4. Thread Group
5. What will the ZAP API do?
   1. View the testing results?
   2. Trigger a testing
   3. Spider a website