Web Application Attacks and OWASP Top 10 CEH Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A web application is vulnerable to reflected XSS. The development team wants to implement a defense that prevents the browser from executing inline scripts. Which security header is most effective for this purpose?

   • AX-Content-Type-Options: nosniff
   • BX-Frame-Options: DENY
   • CContent-Security-Policy (CSP) with script-src 'self'
   • DStrict-Transport-Security (HSTS)
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A web application has an administrative interface that is accessible at /admin. The application checks for an 'isAdmin' flag in the user's session. A penetration tester changes the 'isAdmin' flag from false to true in the session cookie and gains administrative access. Which of the following is the most likely vulnerability?

   • ASession fixation
   • BInsecure deserialization
   • CCross-site request forgery
   • DBroken Access Control due to trusting client-side session data
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A penetration tester is performing a web application assessment. The tester has completed reconnaissance and identified a login form that appears to be vulnerable to SQL injection. The tester wants to confirm the vulnerability with minimal risk of causing data loss. Which technique is most appropriate?

   • ASubmit a single quote (') and observe the application's error response
   • BSubmit a payload that uses sleep(10) to test for time-based blind injection
   • CSubmit a payload that uses UNION SELECT to extract data from the database
   • DSubmit a payload that uses ; DROP TABLE users; -- to test for stacked queries
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A penetration tester is testing a web application that parses XML documents. The tester uploads an XML file that includes an external entity pointing to an internal server URL. The application responds with the internal server's response. Which of the following is the most likely impact of this vulnerability?

   • AServer-Side Request Forgery (SSRF) allowing access to internal resources
   • BData tampering of the XML document
   • CDenial of Service via entity expansion
   • DRemote Code Execution on the server
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a key element of effective logging and monitoring?

   • AOnly logging successful events
   • BLogging all authentication attempts and access control failures
   • CStoring logs in plaintext on the same server
   • DDisabling logs to save storage space
   Reveal Solution Discussion Select an answer first