Certified Ethical Hacker Web Application Security 5

Question 1

A JWT signed with the 'none' algorithm is dangerous because:

Accepted Answer

It can be forged with no valid signature

Answer

It encrypts data twice

Answer

It expires too quickly

Answer

It compresses payloads

Question 2

Which testing approach examines a running application without source code access?

Accepted Answer

DAST

Answer

SAST

Answer

Code review

Answer

Threat modeling

Question 3

Mass assignment vulnerabilities occur when an application:

Accepted Answer

Binds user input directly to internal object properties

Answer

Caches too aggressively

Answer

Uses weak TLS

Answer

Logs passwords

Question 4

Which response best limits the impact of a successful credential-stuffing attack?

Accepted Answer

Multi-factor authentication

Answer

Longer URLs

Answer

Disabling cookies

Answer

Bigger session IDs

Question 5

An open redirect vulnerability is commonly abused to:

Accepted Answer

Send users to malicious sites while appearing trusted

Answer

Read server files

Answer

Inject SQL

Answer

Crash the parser

Question 6

Which practice most reduces risk from vulnerable third-party JavaScript libraries?

Accepted Answer

Maintaining a software bill of materials and patching dependencies

Answer

Minifying code

Answer

Adding more cookies

Answer

Increasing timeout values

Question 7

Subresource Integrity (SRI) protects against:

Accepted Answer

Tampered scripts loaded from a CDN

Answer

SQL injection

Answer

Slow database queries

Answer

Expired TLS certificates