Most Common Application-Level Attacks CASENET Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a recommended mitigation against CSRF attacks?

   • AValidating that the 'Referer' header matches the application's domain.
   • BIncluding a unique, unpredictable anti-CSRF token in each state-changing request and validating it on the server.
   • CEncoding all output with HTML entities.
   • DUsing SSL/TLS for all communications.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A .NET application uses a third-party library that deserializes data from a request header. An attacker sends a specially crafted header that causes the application to execute arbitrary OS commands. Which attack is this, and what is the most effective mitigation?

   • ALDAP injection; sanitize the header.
   • BInsecure deserialization; update the library to a patched version and validate the data before deserialization.
   • CCommand injection; use parameterized commands.
   • DBuffer overflow; use safe string functions.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A .NET application uses a shared hosting environment where the web server runs under a low-privileged account. The application has a file upload feature that stores files in a directory with write permissions for the application pool. An attacker uploads a .NET assembly and triggers its execution. Which control would be most effective in preventing this attack?

   • ARun the application pool under a higher-privileged account to reduce the impact of the attack.
   • BStore uploaded files in a separate directory with script execution disabled and enforce an allowlist of file extensions.
   • CEncrypt the uploaded files with a key stored in the web.config.
   • DUse a WAF to block uploads with .dll extensions.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following behaviors in application logs is most indicative of a CSRF attack?

   • AA request with a 'Content-Type' header of 'application/x-www-form-urlencoded'.
   • BA series of state-changing requests (e.g., password changes) from the same user session but with different IP addresses and unusual referrer headers.
   • CA request that contains a JavaScript alert() function in a parameter.
   • DA single request with a very large payload containing base64-encoded data.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A .NET web application uses Entity Framework with LINQ to query a SQL Server database. A security review reveals that some queries are built by concatenating user input directly into the query string. Which combination of controls should the team implement to most directly address the identified vulnerability?

   • ADisable error messages in production and log all exceptions to the event log.
   • BEncode all user input with HTML encoding before it is used in SQL queries.
   • CAdd a Web Application Firewall (WAF) in front of the application and rely on its default rules.
   • DUse parameterized queries or LINQ-to-Entities with parameters, and validate input against an allowlist.
   Reveal Solution Discussion Select an answer first