eJPT Web Application Security & Testing

Question 1

What is SQL injection in web application security?

Accepted Answer

Inserting malicious SQL queries to manipulate the database.

Answer

Injecting malicious code into the web server.

Answer

Bypassing authentication with stolen credentials.

Answer

Exploiting file uploads to execute remote code.

Question 2

What is Cross-Site Scripting (XSS)?

Accepted Answer

Injecting malicious scripts into web pages viewed by others.

Answer

Injecting malicious code into the browser.

Answer

Bypassing login systems.

Answer

Manipulating web server configurations.

Question 3

What is the purpose of web application firewalls (WAF)?

Accepted Answer

To monitor and filter HTTP traffic for security.

Answer

To prevent all incoming traffic.

Answer

To enhance server performance.

Answer

To block specific web applications.

Question 4

How can session hijacking occur in web application security?

Accepted Answer

By intercepting and stealing session tokens.

Answer

By stealing a user's login credentials.

Answer

By manipulating URL parameters.

Answer

By exploiting server misconfigurations.

Question 5

What is the main goal of a web application penetration test?

Accepted Answer

To find and exploit vulnerabilities in the web application.

Answer

To fix coding errors.

Answer

To enhance server-side performance.

Answer

To protect against DDoS attacks.

Question 6

What is the purpose of input validation in preventing web application vulnerabilities?

Accepted Answer

To ensure that user inputs are properly sanitized.

Answer

To improve the web application's UI.

Answer

To speed up page load times.

Answer

To monitor network traffic.

Question 7

What is the purpose of HTTP Secure (HTTPS) in web applications?

Accepted Answer

To encrypt data transmitted between client and server.

Answer

To improve the user interface.

Answer

To increase the server's processing power.

Answer

To store sensitive data securely.

Question 8

What is a common method used to test for SQL injection vulnerabilities in web applications?

Accepted Answer

Inserting SQL commands like single quote (') in input fields.

Answer

Using brute force to break passwords.

Answer

Scanning for vulnerabilities in the source code.

Answer

Performing a system reboot.

Question 9

What is Cross-Site Request Forgery (CSRF)?

Accepted Answer

Tricking users into making unintended actions on a web application.

Answer

Forcing users to change their password.

Answer

Spamming a web application with requests.

Answer

Hacking a user's account by guessing passwords.