Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   An attacker uploads a file named `shell.php` to a web application that does not validate file types. What is the most likely outcome if the file is stored in a web-accessible directory?

   • AThe file is quarantined by the server's antivirus
   • BThe file is automatically executed by the server
   • CThe attacker can access the file and execute it as server-side code
   • DThe file is converted to a harmless text file
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A penetration tester is using Burp Suite to analyze a web application. The tester wants to automate the detection of SQL injection and XSS vulnerabilities in a specific parameter of a POST request. Which Burp Suite feature is most appropriate for this task?

   • AIntruder with a payload list of common injection strings.
   • BProxy to intercept and log requests.
   • CDecoder to encode the payload.
   • DRepeater to manually modify and resend the request once.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A security engineer is reviewing an application that parses XML documents from authenticated partners. The application must support legacy DTDs for compatibility. The engineer wants to prevent XXE while maintaining functionality. Which approach best balances security and compatibility?

   • AKeep DTDs enabled but filter out DOCTYPE declarations in the input.
   • BUse a different XML parser that does not support DTDs at all.
   • CDisable external entity resolution but allow internal DTDs.
   • DAllow external entities but restrict them to a safe allowlist of domains.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which of the following is a common authentication flaw that allows attackers to bypass login?

   • AStoring passwords in plaintext
   • BImplementing multi-factor authentication
   • CUsing HTTPS
   • DUsing parameterized queries
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A penetration tester is using Burp Suite to test a web application for SQL injection and XSS. The tester has already identified a parameter that appears to be vulnerable. Which Burp Suite feature is most appropriate for automating the exploitation of the SQL injection and verifying the XSS?

   • AUse the Proxy tool to intercept and modify the request on the fly.
   • BUse the Decoder tool to encode the payloads before sending them.
   • CUse the Repeater tool to manually send a single request with a combined SQL injection and XSS payload.
   • DUse the Intruder tool to fuzz the parameter with a payload list of SQL injection and XSS payloads.
   Reveal Solution Discussion Select an answer first