4.8 Evaluate the Parts of an HTTP Response (response Code, Headers, Body) 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An analyst is monitoring a web application and sees a response with status code 403 for a request to an admin page. What does this status code indicate?

   • AThe server encountered an internal error.
   • BThe client needs to authenticate to access the resource.
   • CThe requested resource was not found.
   • DThe client does not have permission to access the requested resource.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An analyst is testing a web application and receives a 301 status code for a request to an old URL. What is the most likely reason for this response?

   • AThe client is not authorized to access the resource.
   • BThe resource is temporarily unavailable.
   • CThe server encountered an internal error.
   • DThe resource has been permanently moved to a new URL.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An analyst is investigating a potential open redirect vulnerability. The analyst sends a request to a web application with a 'redirect' parameter set to an external URL. The response is a 302 with a Location header pointing to the external URL. However, the analyst notices that the response also includes a 'Set-Cookie' header with a session ID. What is the most likely security concern?

   • AThe 302 status code is incorrect and should be a 301.
   • BThe external URL is likely malicious and will steal the session ID.
   • CThe Set-Cookie header is not secure because it lacks the Secure flag.
   • DThe session ID may be leaked to the external site if the redirect is followed.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In the context of an HTTP response, what is the primary purpose of the status line?

   • AIt indicates the server's software and version information.
   • BIt contains metadata about the response, such as the content type and length.
   • CIt carries the actual data requested by the client, such as HTML or JSON.
   • DIt provides the protocol version, a numeric status code, and a reason phrase.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In an HTTP response, what is the primary role of the response body?

   • AIt indicates the HTTP version and status code.
   • BIt contains the requested data or content, such as HTML, JSON, or binary files.
   • CIt controls caching and cookie behavior.
   • DIt provides metadata about the response, such as content type and length.
   Reveal Solution Discussion Select an answer first