Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A development team is implementing security controls for a web application that uses a content management system (CMS). The CMS has a plugin that is vulnerable to stored XSS. The team cannot update the plugin immediately due to compatibility issues. Which of the following is the most effective temporary mitigation?

   • ARemove the vulnerable plugin from the CMS.
   • BImplement a Content Security Policy (CSP) that disallows inline scripts and restricts script sources to trusted domains.
   • CUse a WAF rule to block requests containing the string '<script>'.
   • DDisable JavaScript in the users' browsers.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A web application allows users to upload documents. The developer wants to prevent malicious file uploads. Which combination of controls is most effective?

   • AValidate file extension, MIME type, and file content; store files outside the web root; and disable script execution in the upload directory.
   • BUse a client-side JavaScript check to validate the file type before upload.
   • COnly check the file extension and rely on the web server to reject dangerous files.
   • DRename the file to a random name and store it in the web root.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   A malicious script is permanently stored on a website's comment section. When any user views the page, the script executes in their browser. Which type of XSS is this?

   • ABlind XSS
   • BDOM-based XSS
   • CReflected XSS
   • DStored XSS
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following best describes the goal of a CSRF attack?

   • ATo execute arbitrary code on the victim's browser
   • BTo steal the victim's session cookie
   • CTo read sensitive data from the victim's browser
   • DTo perform state-changing actions on behalf of the authenticated victim
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   An attacker exploits a web application's URL parameter that fetches a remote resource. The attacker changes the URL to `http://169.254.169.254/latest/meta-data/` to access cloud metadata. This is an example of:

   • ACross-site scripting
   • BSQL injection
   • CServer-Side Request Forgery (SSRF)
   • DCommand injection
   Reveal Solution Discussion Select an answer first