Web Application Penetration Testing CPENT Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   You are testing a file upload feature that allows users to upload profile pictures. The application checks the file extension and MIME type but does not inspect the file content. You successfully upload a file named 'avatar.php.jpg' and the server executes it as PHP. Which vulnerability is present, and what is the most effective remediation?

   • AXSS via uploaded file; encode all output and set Content-Type headers
   • BPath traversal; sanitize the filename and use a whitelist of allowed characters
   • CUnrestricted file upload; validate the file content and store files outside the web root
   • DCommand injection; use parameterized queries and input validation
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An e-commerce site applies a 10% discount coupon at checkout. You notice that by changing the 'discount' parameter in the POST request from 0.1 to 0.5, the final price is reduced by 50%. The application does not recalculate the discount server-side. What is the most appropriate finding and remediation?

   • AMass assignment: the discount field is bound to the model; remediate by using a whitelist of allowed fields
   • BInsecure direct object reference: the discount parameter is a direct object reference; remediate by using indirect references
   • CCSRF: the discount change is a state-changing request; remediate by adding an anti-CSRF token
   • DBusiness logic flaw: the server trusts client-supplied discount values; remediate by calculating discounts server-side and validating coupon codes
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   A tester notices that by changing the quantity of an item to a negative number in a shopping cart, the total price decreases. Which type of vulnerability is this?

   • ABusiness logic flaw
   • BSQL injection
   • CSecurity misconfiguration
   • DCross-site scripting
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   You have completed a penetration test and identified a critical IDOR vulnerability that allows users to access other users' invoices. You also found a business logic flaw that allows users to apply a discount code multiple times. Which remediation guidance is most appropriate for the IDOR vulnerability?

   • AImplement object-level access control checks on the server side for every request
   • BAdd a CAPTCHA to the invoice download endpoint
   • CUse a CDN to cache invoice responses
   • DEncrypt the invoice data at rest
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   You are testing a web application and successfully exploit a stored XSS vulnerability. You notice that the application does not log any security-relevant events, such as failed login attempts or admin actions. Which finding is the most critical logging and monitoring gap?

   • ANo logging of failed login attempts
   • BNo centralized logging or alerting mechanism
   • CNo logging of admin actions
   • DNo logging of XSS payloads in request parameters
   Reveal Solution Discussion Select an answer first