API and Java Web Token Penetration Testing CPENT Practice Questions (Page 12)

Questions 56–60

1. 56application · medium

   You are testing an API endpoint that accepts a 'user_id' parameter. You want to identify injection vulnerabilities. Which approach is most effective?

   • AFuzz the parameter with a list of SQL injection payloads, XSS payloads, and command injection strings while observing responses for errors or anomalies.
   • BSend a very large value for 'user_id' to see if the API returns a 500 error.
   • CUse a wordlist to enumerate other parameters on the endpoint.
   • DChange the HTTP method from GET to POST and see if the API behaves differently.
   Reveal Solution Discussion Select an answer first
2. 57expert · hard

   You are leading an API penetration test. The client has limited time and budget. You need to prioritize testing activities. Which sequence of activities is most effective for identifying high-impact vulnerabilities?

   • AFirst enumerate all endpoints, then test for authentication and authorization flaws, then fuzz parameters for injection, and finally check for misconfigurations.
   • BFocus only on JWT vulnerabilities since the API uses JWT, and skip endpoint enumeration.
   • CStart with fuzzing all parameters for injection, then enumerate endpoints, and finally test authentication.
   • DTest rate limiting first, then move to authorization, and only test injection if time permits.
   Reveal Solution Discussion Select an answer first
4. 58foundation · easy

   What is a common way attackers bypass API rate limiting?

   • ARotating IP addresses or using proxies
   • BSending requests in JSON format
   • CUsing HTTPS
   • DAdding a User-Agent header
   Reveal Solution Discussion Select an answer first
5. 59foundation · easy

   After an attacker modifies the payload of a JWT, what must they also do for the token to be accepted by a properly configured server?

   • ASend the token in a different header
   • BChange the token type to JWT
   • CRe-encode the header and payload and generate a valid signature
   • DIncrease the expiration time
   Reveal Solution Discussion Select an answer first
6. 60application · medium

   You are performing an API assessment and have discovered the base URL https://api.example.com/v1/. The API documentation is not public. Which method is most effective for discovering hidden endpoints?

   • ASend a GET request to the base URL and analyze the response headers for endpoint hints.
   • BUse a wordlist of common API paths (e.g., /admin, /users, /debug) with a tool like ffuf or Burp Intruder against the base URL.
   • CUse a DNS brute-force tool to find subdomains that host the API.
   • DTry common HTTP methods (GET, POST, PUT, DELETE) on the base URL only.
   Reveal Solution Discussion Select an answer first