Web Application Attacks and OWASP Top 10 CEH Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a common security misconfiguration?

   • ALeaving default credentials enabled on a web application
   • BImplementing multi-factor authentication
   • CRegularly updating software
   • DUsing HTTPS for all traffic
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's web application allows users to log in and then issues a session ID that remains valid for 30 days. The application does not rotate the session ID after login and does not invalidate sessions on the server when a user logs out. Which attack is most directly enabled by these weaknesses?

   • ACross-site request forgery (CSRF)
   • BSession fixation
   • CLDAP injection
   • DSQL injection
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A web application has a search feature that reflects the user's query in the response without proper encoding. A penetration tester submits the following URL: /search?q=<script>alert(1)</script> and the script executes in the browser. Which type of XSS is this, and what is the most effective mitigation?

   • AReflected XSS; use a Web Application Firewall (WAF) to block the payload
   • BStored XSS; apply input validation on the server
   • CDOM-based XSS; use a Content Security Policy (CSP)
   • DReflected XSS; apply output encoding in the response
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A penetration tester is assessing a web application. During the mapping phase, the tester identifies that the application uses predictable session IDs and that the /admin directory is accessible without authentication. The tester wants to prioritize testing based on the OWASP Top 10. Which two categories should the tester focus on first?

   • AIdentification and Authentication Failures and Broken Access Control
   • BSensitive Data Exposure and Cryptographic Failures
   • CInjection and Security Misconfiguration
   • DInsufficient Logging and Monitoring and XSS
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a common mitigation against XXE attacks?

   • AUsing JSON instead of XML for all data
   • BEncoding output with HTML entities
   • CDisabling external entity processing in the XML parser
   • DValidating user input with regex
   Reveal Solution Discussion Select an answer first