Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A development team is implementing security controls for a web application that handles sensitive user data. The team wants to mitigate XSS, CSRF, and SQL injection. Which of the following is the most comprehensive set of countermeasures?

   • AInput validation, output encoding, parameterized queries, and anti-CSRF tokens.
   • BDisable client-side scripting and use HTTP-only cookies.
   • CUse HTTPS, a Web Application Firewall, and a strong password policy.
   • DUse a content security policy (CSP) and a same-site cookie attribute.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is the most effective defense against SQL injection?

   • AInput validation using a blocklist
   • BOutput encoding
   • CParameterized queries (prepared statements)
   • DUsing HTTPS
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A web application allows users to view their own profile by navigating to /profile?id=123. The application only checks that the user is logged in, not that the profile belongs to them. A user changes the id to 124 and views another user's data. Which type of vulnerability is this?

   • ABroken access control (IDOR).
   • BXSS.
   • CCSRF.
   • DSQL injection.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security administrator is reviewing the authentication mechanism of a web application. The application uses session cookies that are valid for 24 hours and are not regenerated after login. Which of the following is the most effective way to mitigate session fixation attacks?

   • AStore the session ID in a cookie with the HttpOnly flag.
   • BShorten the session timeout to 5 minutes.
   • CUse a longer, more random session ID.
   • DRegenerate the session ID immediately after successful authentication.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary difference between SSRF and CSRF?

   • ASSRF is initiated by the attacker's browser, while CSRF is initiated by the server
   • BSSRF is a client-side attack, while CSRF is a server-side attack
   • CSSRF tricks the server into making requests, while CSRF tricks the victim's browser into making requests
   • DSSRF steals session tokens, while CSRF steals cookies
   Reveal Solution Discussion Select an answer first