10. Describe Top OWASP Threats (such as XSS, SQL Injections, and CSRF) 200-901 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a category that appears in the OWASP Top 10 list?

   • APhishing
   • BInjection
   • CDenial of Service
   • DBuffer Overflow
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An administrator of a network management web app notices that authenticated users are changing their own device passwords through a URL like /changePassword?new=attacker. The change request is sent as a GET request and the app relies only on the session cookie for authentication. Which additional control should be implemented to prevent an attacker from forcing a password change?

   • ASanitize the new password field to remove HTML tags
   • BSet the Secure flag on the session cookie
   • CUse a parameterized query to update the password in the database
   • DRequire a CSRF token that is unique per session and validated on every state-changing request
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst is investigating an incident where a user's session was hijacked. The user had visited a forum that allowed HTML in posts. The attacker's post contained a script that sent the user's cookies to an external server. Which OWASP threat category does this attack belong to, and what is the primary mitigation?

   • ACSRF; implement anti-CSRF tokens on the forum
   • BSQL injection; use parameterized queries for forum posts
   • CReflected XSS; use output encoding on all user input
   • DStored XSS; sanitize user-generated HTML on the server before rendering
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network automation portal accepts a device name in a search field and builds a query like SELECT * FROM devices WHERE name = '” + userInput + “'. A user enters 'dev1' OR '1'='1' and receives the full device table. Which remediation should the developer implement?

   • AEncode the search term with HTML entities before sending it to the database
   • BAdd a CSRF token to the search form
   • CUse parameterized queries or prepared statements for all database access
   • DRestrict the search field to alphanumeric characters only
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A developer is reviewing a web application that displays user comments on a public page. An attacker submits a comment containing JavaScript that executes in the browsers of other users when they view the page. Which type of XSS attack is this?

   • ABlind XSS
   • BDOM-based XSS
   • CStored XSS
   • DReflected XSS
   Reveal Solution Discussion Select an answer first