Common Application Security Risks and OWASP Top 10 DSE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A penetration tester is assessing a web application and finds that the application includes a hidden debug endpoint that allows executing system commands. The endpoint is not documented and is only accessible to users with a specific cookie value. Which OWASP Top 10 category is most directly exploited, and what is the best remediation?

   • ABroken Access Control; require a stronger cookie value.
   • BSecurity Misconfiguration; remove the debug endpoint from production builds.
   • CSensitive Data Exposure; encrypt the responses from the endpoint.
   • DInjection; sanitize the commands passed to the endpoint.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is developing a mobile app that stores user credentials locally on the device. The security team is concerned about sensitive data exposure. Which practice is most effective in reducing the risk of credential theft if the device is lost or compromised?

   • AStore credentials in plain text in a local database for faster authentication
   • BEncode credentials with Base64 and store them in a shared preferences file
   • CUse the device's hardware-backed keystore and require biometric authentication before accessing credentials
   • DStore credentials on the server and cache them in memory only for the session
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A developer is reviewing code that handles file uploads. The application allows users to upload profile pictures. The developer notices that the application does not validate the file type and stores files in a publicly accessible directory. Which OWASP Top 10 risk is most directly demonstrated, and what is the best mitigation?

   • ASecurity Misconfiguration; disable directory browsing and set secure headers
   • BBroken Access Control; restrict directory listing via web server configuration
   • CInjection; sanitize the file name to prevent path traversal
   • DBroken Access Control; validate file type and store files outside the web root
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A development team is using a CI/CD pipeline to build and deploy a web application. They want to integrate security testing early in the SDLC to reduce the cost of fixing vulnerabilities. Which practice best aligns with the OWASP Top 10 and DevSecOps principles?

   • AIntegrate static application security testing (SAST) into the build stage and fail the build on critical findings.
   • BUse a web application firewall (WAF) in production to block all attacks, eliminating the need for testing.
   • CRun a dynamic application security test (DAST) against the production environment after every release.
   • DPerform a manual code review only before the final release.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A team is developing a microservices-based application. They want to ensure that each service validates incoming requests and does not trust data from other services. Which OWASP Top 10 category is most relevant to this concern, and what is the best practice?

   • ABroken Access Control; implement mutual TLS between services.
   • BInjection; use an API gateway to sanitize all incoming data.
   • CSecurity Misconfiguration; disable unnecessary features in each service.
   • DInjection; validate and sanitize all inputs at the boundary of each service.
   Reveal Solution Discussion Select an answer first