Free GIAC GWAPT Practice Test & Real Exam Questions
Which header is commonly used to prevent Cross-Site Request Forgery attacks?
Correct Answer: D
Vote an answer
A web application allows SQL injection attacks on its admin panel. What should you recommend to mitigate this issue?
Correct Answer: C
Vote an answer
Which HTTP method is most commonly used in brute-force attacks against login forms?
Correct Answer: D
Vote an answer
Which of the following are common methods to mitigate Cross-Site Scripting (XSS) vulnerabilities? (Choose two)
Correct Answer: C,D
Vote an answer
Which tool is commonly used for mapping the structure of a web application?
Correct Answer: D
Vote an answer
What techniques can attackers use in SQL injection attacks? (Choose two)
Correct Answer: A,D
Vote an answer
What tools are commonly used to test for Cross-Site Scripting vulnerabilities? (Choose two)
Correct Answer: C,D
Vote an answer
During an automated scan with OWASP ZAP, you identify several potential XSS vulnerabilities.
What is the best follow-up action?
What is the best follow-up action?
Correct Answer: C
Vote an answer
You discover that a web application reflects user input in the URL. How can you confirm a Reflected XSS vulnerability?
Correct Answer: A
Vote an answer
Which method is most effective in preventing SQL injection attacks?
Correct Answer: D
Vote an answer
