10. Describe Top OWASP Threats (such as XSS, SQL Injections, and CSRF) 200-901 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A developer is fixing a SQL injection vulnerability in a search endpoint. The current code builds a query like: SELECT * FROM products WHERE name = '" + userInput + "'. Which change is the most secure and maintainable?

   • AUse a stored procedure that builds the query dynamically
   • BReplace the concatenation with a prepared statement using a placeholder for the user input
   • CAdd a function that strips all non-alphanumeric characters from the input
   • DEncode the input as HTML entities before concatenation
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company is modernizing a legacy web application. The application has a search feature that is vulnerable to SQL injection and a comment section that is vulnerable to stored XSS. The team has limited development resources and must prioritize fixes. The application is internet-facing and processes sensitive customer data. Which approach best balances risk reduction and resource constraints?

   • AFix the stored XSS first because it affects all users, while SQL injection only affects the search function
   • BRewrite the application from scratch to address both issues
   • CDeploy a WAF in front of the application and defer both fixes
   • DFix the SQL injection first because it can lead to data exfiltration, then address stored XSS
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary reason a CSRF attack can succeed even though the user did not intend to perform the action?

   • AThe target site has a cross-origin resource sharing (CORS) policy that allows all domains.
   • BThe user's browser has a plugin that automatically submits forms on behalf of the user.
   • CThe browser automatically includes the user's authentication cookies with requests to the target site.
   • DThe attacker has stolen the user's session cookie and is using it directly.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   A developer wants to prevent SQL injection in a web application that queries a database. Which technique is most effective?

   • AFiltering user input with a blacklist of SQL keywords
   • BUsing HTTPS to encrypt traffic between the browser and server
   • CDisabling client-side JavaScript in the browser
   • DUsing parameterized queries (prepared statements)
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A network management web app uses session cookies for authentication. A security review recommends adding CSRF protection, but the app has many legacy forms and the team wants to minimize user disruption. They are considering: (A) adding a per-session CSRF token to every form, (B) setting the SameSite attribute to Lax on session cookies, (C) validating the Origin header on all POST requests, (D) requiring a custom header on all AJAX requests. Which option provides the strongest CSRF protection while being least likely to break legitimate cross-site navigation?

   • AOption A: Adding a per-session CSRF token to every form
   • BOption D: Requiring a custom header on all AJAX requests
   • COption C: Validating the Origin header on all POST requests
   • DOption B: Setting SameSite=Lax on session cookies
   Reveal Solution Discussion Select an answer first