Web Application Attacks PT0-003 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A tester is reviewing a web application's source code and finds the following line: `$file = $_GET['file']; include("/var/www/html/" . $file);`. Which of the following attacks is this code MOST vulnerable to?

   • ASQL injection, because the `$file` parameter is used in a database query.
   • BCommand injection, because the `$file` parameter is passed to a shell command.
   • CCross-site scripting, because the `$file` parameter is reflected in the page.
   • DDirectory traversal, because the `$file` parameter is not validated and can contain `../` sequences.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary goal of a directory traversal attack?

   • ATo overload the server with excessive requests to cause a denial of service.
   • BTo execute arbitrary JavaScript in a user's browser.
   • CTo inject malicious SQL queries into the database.
   • DTo access files and directories that are outside the web server's root directory.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a common consequence of a successful stored XSS attack?

   • AThe attacker can intercept all network traffic between the client and server.
   • BThe attacker is able to modify the DNS records of the target domain.
   • CThe attacker gains persistent control over the web server's operating system.
   • DThe malicious script is permanently stored on the server and executed whenever a user views the affected page.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common sign that a web application is vulnerable to directory traversal?

   • AThe application returns the contents of system files when path traversal sequences are included in a parameter.
   • BThe application displays a 404 error when a non-existent page is requested.
   • CThe application uses a content management system (CMS) like WordPress.
   • DThe application has a login page that uses HTTPS.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common indicator that a web application may be vulnerable to directory traversal?

   • AThe application uses HTTPS to encrypt all traffic.
   • BThe application uses a web application firewall (WAF).
   • CThe application is hosted on a Linux server.
   • DThe application uses file names from user input to retrieve files from the server.
   Reveal Solution Discussion Select an answer first