Multiple choice technology security

What parameters does Appscan modify when testing a .net webservice?

  1. POST parameters

  2. SOAP parameters

  3. GET parameters

  4. Cookies

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

When testing .NET web services, AppScan targets SOAP parameters since these are the primary input mechanism for SOAP-based web services. Unlike REST services that might use GET/POST parameters, .NET SOAP services communicate through XML-formatted SOAP messages, making SOAP parameters the correct attack surface.