Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A web application allows users to access a URL like `/admin` by simply changing the URL in the browser, even if they are not administrators. Which type of flaw is this?

   • ABroken authentication
   • BCross-site scripting
   • CSQL injection
   • DBroken access control
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A web application uses cookies for session management but does not set the SameSite attribute. A user is logged in and visits a malicious site. The malicious site contains a form that auto-submits a POST request to the application's change-password endpoint. Which defense would most effectively prevent this attack?

   • ASet the SameSite attribute to Strict or Lax on session cookies.
   • BRegenerate the session ID after login.
   • CUse HTTPS to encrypt the session cookie.
   • DValidate the user-agent header on each request.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A development team is fixing a SQL injection vulnerability in a login form. The application is written in Java and uses JDBC. Which coding practice is the most effective and secure way to prevent SQL injection?

   • AValidate user input with a regex that only allows alphanumeric characters.
   • BUse PreparedStatement with parameterized queries.
   • CUse a stored procedure that concatenates the input inside the database.
   • DEscape single quotes in user input before concatenating into the SQL string.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team is hardening a web application against CSRF. The application uses cookies for session management and has a state-changing endpoint that accepts POST requests. The team wants to implement a defense that does not break existing functionality where users open multiple tabs. Which CSRF defense is most appropriate?

   • ACheck the Origin header on all state-changing requests.
   • BUse a synchronizer token pattern with a per-session CSRF token embedded in forms.
   • CSet the SameSite attribute to Strict on all cookies.
   • DUse a double-submit cookie with a random value in both a cookie and a hidden form field.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which technique is commonly used to steal a session token from a victim's browser?

   • AARP spoofing
   • BCross-site scripting (XSS)
   • CSQL injection
   • DDenial of service
   Reveal Solution Discussion Select an answer first