Most Common Application-Level Attacks CASEJAVA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security review finds that an application's error pages expose stack traces and database connection strings to end users. Which OWASP Top 10 category does this fall under, and what is the primary risk?

   • ASecurity Misconfiguration; information disclosure
   • BBroken Access Control; privilege escalation
   • CInjection; remote code execution
   • DCross-site scripting; session hijacking
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which OWASP Top 10 vulnerability class is the root cause of SQL injection attacks?

   • AInjection
   • BSensitive Data Exposure
   • CXML External Entities (XXE)
   • DBroken Authentication
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary impact of a stored cross-site scripting (XSS) attack on an application's users?

   • AThe attacker can steal session cookies and impersonate users
   • BThe attacker can decrypt all network traffic between the user and the server
   • CThe attacker can cause the server to crash permanently
   • DThe attacker can directly modify records in the database
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An attacker exploits a path traversal vulnerability to access `/etc/passwd` on the server. The application fails to validate user-supplied file paths. Which of the following best describes the impact on the CIA triad?

   • AAuthentication is compromised because credentials are stolen
   • BIntegrity is compromised because files are modified
   • CConfidentiality is compromised because sensitive files are exposed
   • DAvailability is compromised because the server crashes
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   During a penetration test, a tester discovers that the application's login form allows an attacker to submit a crafted username that changes the SQL query to bypass authentication. Which OWASP Top 10 category best describes this vulnerability, and what is the primary impact?

   • ASecurity Misconfiguration; denial of service
   • BSensitive Data Exposure; data leakage
   • CBroken Authentication; session hijacking
   • DInjection; authentication bypass leading to unauthorized access
   Reveal Solution Discussion Select an answer first