A web application has a search feature that is vulnerable to SQL injection. The application uses a WAF that blocks common SQL keywords like UNION and SELECT. The tester wants to extract data from the database. Which technique is most likely to bypass the WAF?

Use inline comments to break up keywords, such as UN/**/ION SEL/**/ECT

Use a time-based blind injection with SLEEP(10)

Use an out-of-band technique with DNS exfiltration

Use a UNION SELECT with the keywords in lowercase

A web application allows users to enter their name, which is displayed on their profile page. To prevent stored XSS attacks, which of the following is the most effective defense?

Using a Web Application Firewall (WAF) to block malicious input

Limiting the input length to 50 characters

Output encoding the user input when rendering it in the HTML

Storing the input in a database with encryption

Why is using a library with a known critical vulnerability a security risk?

It will cause the application to crash

It will slow down the application

Attackers can exploit the known vulnerability to compromise the application

It will prevent the application from being indexed by search engines

A security analyst is investigating a suspected data breach. The application logs successful logins but does not log failed login attempts or access to sensitive data. Which OWASP Top 10 category is most directly related to this gap?

Insufficient Logging and Monitoring

Identification and Authentication Failures

EC-CouncilCertified Ethical Hacker

Domain 5Objective 2

Web Application Attacks and OWASP Top 10 CEH Practice Questions (Page 2)

Part of the Web Application Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

14concepts

14 Concepts in This Objective

Web Application Attack Surface
OWASP Top 10 Overview
Injection Attacks
Broken Authentication and Session Management
Sensitive Data Exposure
XML External Entity (XXE) Attacks
Broken Access Control
Security Misconfiguration
Cross-Site Scripting (XSS)
Insecure Deserialization
Using Components with Known Vulnerabilities
Insufficient Logging and Monitoring
Web Application Attack Methodologies
Web Application Defense Mechanisms

Questions 6–10

6expert · hard
A web application has a search feature that is vulnerable to SQL injection. The application uses a WAF that blocks common SQL keywords like UNION and SELECT. The tester wants to extract data from the database. Which technique is most likely to bypass the WAF?
Select an answer first
7application · medium
A web application allows users to enter their name, which is displayed on their profile page. To prevent stored XSS attacks, which of the following is the most effective defense?
Select an answer first
8foundation · easy
Why is using a library with a known critical vulnerability a security risk?
Select an answer first
9application · medium
A security analyst is investigating a suspected data breach. The application logs successful logins but does not log failed login attempts or access to sensitive data. Which OWASP Top 10 category is most directly related to this gap?
Select an answer first
10foundation · easy
Which security header helps prevent MIME type sniffing attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.