Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   An attacker submits the following input to a search field: `' OR '1'='1`. The application constructs a SQL query by concatenating the input directly. Which type of attack is this?

   • ACross-site scripting
   • BLDAP injection
   • CSQL injection
   • DCommand injection
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A web application has a login form that is vulnerable to SQL injection. The developer wants to fix the vulnerability without changing the application's functionality. Which of the following is the most secure and practical solution?

   • AEncode the input using base64 before including it in the query.
   • BUse prepared statements with parameterized queries for all database access.
   • CUse a stored procedure that dynamically builds the SQL query.
   • DAdd a client-side JavaScript check to reject input containing single quotes.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A penetration tester is using OWASP ZAP to assess a web application. The tester has identified a parameter that is vulnerable to SQL injection and another that is vulnerable to XSS. The tester wants to automate the exploitation of both vulnerabilities in a single pass. Which of the following is the most appropriate approach?

   • AUse ZAP's breakpoint feature to manually modify each request and test the vulnerabilities one by one.
   • BUse ZAP's fuzzer to send a combined payload that contains both SQL injection and XSS payloads.
   • CUse ZAP's spider to crawl the application and identify all parameters, then manually test each one.
   • DUse ZAP's active scanner with both SQL injection and XSS rules enabled, then manually verify the findings.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security engineer is hardening a web application that uses cookie-based sessions. The application must remain compatible with older browsers that do not support the SameSite attribute. The engineer wants to mitigate CSRF without breaking the application's cross-site navigation. Which of the following is the most effective approach?

   • ARequire re-authentication for every state-changing request.
   • BSet the SameSite attribute to Strict for all cookies.
   • CUse a referrer header check to block requests from external domains.
   • DImplement a double-submit cookie pattern with a random token stored in both a cookie and a hidden form field.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a primary risk associated with insecure file upload functionality?

   • ASession fixation
   • BSQL injection
   • CMalware distribution
   • DCSRF
   Reveal Solution Discussion Select an answer first