Most Common Application-Level Attacks CASEJAVA Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How does a typical cross-site request forgery (CSRF) attack execute?

   • AThe attacker injects malicious script into a trusted website to steal session cookies.
   • BThe attacker intercepts and modifies the victim's request in transit using a man-in-the-middle position.
   • CThe attacker sends a crafted SQL query to the application's database through the web interface.
   • DThe attacker tricks the victim's browser into sending a forged HTTP request to a site where the victim is authenticated.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security engineer is analyzing logs and finds requests with 'id=1 OR 1=1' and 'id=1; DROP TABLE users'. The application returns different responses for these inputs. Which attack is being attempted, and what is the most likely vulnerability class?

   • ALDAP injection; Injection
   • BSQL injection; Injection
   • CCross-site scripting; XSS
   • DCommand injection; Injection
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An attacker discovers that a web application's login form does not implement rate limiting. The attacker uses a botnet to try millions of username/password combinations. Which attack is this, and what is the primary impact?

   • ASQL injection; integrity of the database is compromised
   • BCredential stuffing; confidentiality of user accounts is compromised
   • CCSRF; integrity of user sessions is compromised
   • DDenial of service; availability of the login service is degraded
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A developer notices that a search page reflects the user's query in the response without encoding. An attacker crafts a URL with `<script>alert(document.cookie)</script>` in the query parameter. When a victim clicks the link, the script executes in the victim's browser. Which attack mechanism is being exploited, and what is the primary defense?

   • ASQL injection; parameterized queries
   • BStored XSS; input validation on the server
   • CReflected XSS; context-aware output encoding
   • DCSRF; anti-CSRF token
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A team is implementing a file upload feature. They must prevent malicious file execution but also allow users to download files with correct content types. Which combination of controls is most appropriate?

   • AStore files in the web root with a .txt extension regardless of actual content
   • BUse a database BLOB and serve with application/octet-stream for all files
   • CRely on antivirus scanning at upload time only
   • DStore files outside the web root and serve them via a servlet that sets Content-Disposition: attachment and validates content type
   Reveal Solution Discussion Select an answer first