This module has two separate final assessments. After reviewing all presentations and activities for Module $7,$ you will be prepared to answer the following questions. Please remember to take your time, as you must achieve a score of $80\%$ or greater to progress to the next assessment. This assessment requires the use of the Windows IMPACT Lab in the Virginia Cyber Range. You will login to linux.example.com on the lab and use vuln$2.$example.com to practice. vuln$2.$example.com is a purposefully vulnerable DVWA server$7$ Web$-$Based Exploits Assessment The following are a series of high$-$level instructions on how to use ZAP as a proxy. Some details are intentionally missing $-$ please use online forums such as StackOverflow to troubleshoot, if necessary. Before you start this exercise, you will need to start up ZAP and set it up as a proxy for firefox browser on linux.example.com in Windows IMPACT Lab. You can either re$-$watch presentation $7$ or follow these instructions: $(1)$ To start up ZAP, go to Start on linux.example.com, select Web Application Analysis and then ZAP. $(2)$ With ZAP running, open the Firefox web browser. $(3)$ Go to Preferences within the web browser by clicking on the menu button marked #$4$ in the below image. $(4)$ Search for Network Settings and click on the "Settings" button. $(5)$ Click on Manual Proxy Configuration and change the following settings: HTTP Proxy: $127\mathrm{.}0\mathrm{.}0\mathrm{.}1($so you are making a network service running on the local machine a proxy to the Firefox browser$).$ Port: $8080($This will make a network server running on port $8080$ as the proxy for the browser. The server running on $8080$ is ZAP.$)$ Lastly, be sure to select "use this proxy server for all protocols". $(6)$ Click $"$Ok$".$ Question $10/1$ point Go to the website vuln$2.$example.com on Firefox. NOTE: when you use Firefox to reach the vuln$2.$example.com website, you will be met with a warning since we are using ZAP as the proxy server. Select Advanced and Accept the Risk to Continue. Once on the website, what php file does it load? Answer: static.ph