Multiple choice technology security

After a test appscan reports the occurrence of lot of hidden files which you know for sure your application does not contain. What do you think happened?

  1. Somebody put those files there during the test

  2. Appscan created those files

  3. Third party domain was not excluded from the scan

  4. It’s a result of cross site scripting attack
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

AppScan discovered hidden files on external domains because third-party domains were not excluded from the scan scope. When applications include content or links from external sources, AppScan follows those links and tests them, reporting findings from domains outside the target application.

AI explanation

If a scan reports files that don't belong to your application, it's usually because the crawler wandered off into a linked third-party domain (ads, trackers, embedded widgets) that wasn't excluded from the scan scope, and those third-party paths get reported alongside your own findings. It's not evidence of tampering, AppScan creating files itself, or an XSS attack.

Keep practicing — related questions