Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA PT0-003 Exam - Topic 1 Question 40 Discussion

A penetration tester is conducting an assessment of a web application's login page. The tester needs to determine whether there are any hidden form fields of interest. Which of the following is the most effective technique?
D) HTML scraping
A) XSS
B) On-path attack
C) SQL injection

CompTIA PT0-003 Exam - Topic 1 Question 40 Discussion

Actual exam question for CompTIA's PT0-003 exam
Question #: 40
Topic #: 1
[All PT0-003 Questions]

A penetration tester is conducting an assessment of a web application's login page. The tester needs to determine whether there are any hidden form fields of interest. Which of the following is the most effective technique?

Show Suggested Answer Hide Answer
Suggested Answer: D

Hidden form fields in web applications can store user roles, session tokens, and security parameters that attackers may exploit.

HTML scraping (Option D):

Involves analyzing HTML source code to find hidden fields like:

<input type='hidden' name='admin_access' value='true'>

Attackers use tools like Burp Suite, ZAP, or browser developer tools (Ctrl+U or Inspect Element) to locate hidden fields.


Incorrect options:

Option A (XSS): Exploits JavaScript injection, not for finding hidden fields.

Option B (On-path attack): Involves MITM interception, not directly analyzing form fields.

Option C (SQL injection): Targets databases, not HTML forms

by Kimbery at Jun 27, 2026, 05:38 PM

Limited Time Offer

25%

Off

Get Premium PT0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Sherell
2 days ago
I thought HTML scraping was outdated, but it still works well!
upvoted 0 times
...
Annalee
7 days ago
Wait, are we really considering SQL injection for this? Seems off.
upvoted 0 times
...
Novella
12 days ago
On-path attacks can be effective, but not the best choice here.
upvoted 0 times
...
Viki
17 days ago
I disagree, XSS can reveal a lot too!
upvoted 0 times
...
Ammie
22 days ago
HTML scraping is definitely the way to go for hidden fields.
upvoted 0 times
...
Geoffrey
27 days ago
On-path attacks seem more about intercepting data rather than discovering hidden elements, so I’m leaning towards HTML scraping.
upvoted 0 times
...
Annabelle
1 month ago
I practiced a similar question where SQL injection was the focus, but I don't think it applies to finding hidden fields.
upvoted 0 times
...
Erin
1 month ago
I'm not really sure, but I remember something about XSS being related to input fields. Could that be relevant here?
upvoted 0 times
...
Vashti
1 month ago
I think HTML scraping might be the right choice since it involves analyzing the page structure for hidden fields.
upvoted 0 times
...

Save Cancel