Certified Ethical Hacker Web Application Security 2

Question 1

An attacker injects ' OR '1'='1 into a login form and gains access. Which vulnerability is exploited?

Accepted Answer

SQL Injection

Answer

Cross-Site Scripting

Answer

CSRF

Answer

Path Traversal

Question 2

Which HTTP response header best mitigates clickjacking attacks?

Accepted Answer

X-Frame-Options

Answer

Content-Type

Answer

Cache-Control

Answer

Set-Cookie

Question 3

A stored XSS payload is most dangerous because it:

Accepted Answer

Executes for every user who views the data

Answer

Only affects the attacker

Answer

Requires a phishing email

Answer

Cannot steal cookies

Question 4

Which technique best prevents SQL injection in application code?

Accepted Answer

Parameterized queries

Answer

Hiding error messages

Answer

Using HTTPS

Answer

Disabling cookies

Question 5

An IDOR vulnerability typically allows an attacker to:

Accepted Answer

Access objects belonging to other users by changing an ID

Answer

Crash the server

Answer

Brute-force passwords

Answer

Inject JavaScript

Question 6

Which tool is commonly used to intercept and modify HTTP requests during web app testing?

Accepted Answer

Burp Suite

Answer

Wireshark

Answer

Nmap

Answer

John the Ripper

Question 7

What is the primary defense against Cross-Site Request Forgery?

Accepted Answer

Anti-CSRF tokens

Answer

Input length limits

Answer

Minifying JavaScript

Answer

Disabling JavaScript