10. Describe Top OWASP Threats (such as XSS, SQL Injections, and CSRF) 200-901 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A security auditor is categorizing vulnerabilities found in a web application: (1) a search page reflects user input without encoding, (2) a login form concatenates input into a SQL query, and (3) a device configuration form lacks anti-forgery protection. Which OWASP Top 10 categories should the auditor assign to these findings?

   • ACross-Site Scripting, Injection, and Broken Authentication
   • BBroken Access Control, Security Misconfiguration, and XXE
   • CXSS, SQL Injection, and CSRF
   • DSensitive Data Exposure, Insecure Deserialization, and Insufficient Logging
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A user is logged into a web application. The application uses cookies for session management but does not use CSRF tokens. An attacker creates a malicious page that submits a form to the application's 'change password' endpoint. The form is auto-submitted when the page loads. Which of the following is the most effective mitigation?

   • ASet the SameSite attribute to Strict on the session cookie
   • BInclude a CSRF token in the form and validate it on the server
   • CUse a CAPTCHA on the change password form
   • DCheck the Referer header to ensure the request comes from the same origin
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A network automation web app is being redesigned. The team must choose a security architecture that protects against XSS, SQL injection, and CSRF while minimizing performance overhead. Which approach best meets these requirements?

   • ARely solely on a Web Application Firewall (WAF) to filter all malicious requests
   • BUse a single input-validation library that strips all special characters from every input
   • CImplement a layered defense: output encoding, parameterized queries, and CSRF tokens
   • DDisable all client-side scripting and use only server-rendered pages
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security consultant is prioritizing remediation for a web application with limited budget. The app has: (1) reflected XSS in a search page, (2) SQL injection in a login form, (3) CSRF on a device configuration form, and (4) a missing Content-Security-Policy header. Which remediation should be prioritized first based on OWASP risk principles?

   • AFix the SQL injection in the login form
   • BAdd a Content-Security-Policy header
   • CFix the reflected XSS in the search page
   • DAdd CSRF tokens to the device configuration form
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An administrator is configuring a web application that allows users to change their email address. The application uses session cookies but does not include any anti-CSRF protection. Which additional control should be added to prevent CSRF attacks on this state-changing operation?

   • ASet the HttpOnly flag on the session cookie
   • BUse a Content Security Policy that blocks all external scripts
   • CInclude a unique, unpredictable token in a hidden form field and validate it on the server
   • DRequire the user to re-enter their password for every change
   Reveal Solution Discussion Select an answer first