4.8 Evaluate the Parts of an HTTP Response (response Code, Headers, Body) 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security analyst is analyzing a response from a server that is expected to return an image. The response body is binary data, and the Content-Type header is 'image/png'. What is the role of the response body in this context?

   • AIt contains a link to the image file on the server.
   • BIt contains metadata about the image, such as dimensions and color depth.
   • CIt carries the actual image data in binary format.
   • DIt contains a textual description of the image for accessibility.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An analyst is reviewing a web application's response to a request for a login page. The response includes the header 'Strict-Transport-Security: max-age=31536000'. What is the purpose of this header?

   • ATo specify the maximum age of the response in the cache.
   • BTo instruct the browser to only use HTTPS for all future requests to the domain.
   • CTo indicate that the response body is compressed.
   • DTo set a cookie that expires after a year.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   During a security assessment, you observe an HTTP response with a 500 status code and a body containing a stack trace. What does this indicate?

   • AThe requested resource was not found on the server.
   • BThe server is redirecting the client to a new URL.
   • CThe server encountered an internal error and may be leaking sensitive information.
   • DThe client's request was malformed or unauthorized.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is reviewing web server logs and sees a response with status code 404 for a request to a sensitive file path. The analyst wants to determine if this is a normal response or a potential information disclosure. What does the 404 status code indicate?

   • AThe requested resource has been permanently moved to a new URL.
   • BThe server encountered an internal error while processing the request.
   • CThe requested resource was not found on the server.
   • DThe client is not authorized to access the requested resource.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An analyst is monitoring a web application and sees a response with status code 204 for a request to delete a resource. What does this status code indicate?

   • AThe request was successful, but there is no content to return in the body.
   • BThe client needs to authenticate to access the resource.
   • CThe server encountered an internal error.
   • DThe requested resource was not found.
   Reveal Solution Discussion Select an answer first