A SOC analyst is reviewing a suspicious JavaScript file that was loaded by a web page. The script appears to collect form data and send it to an external domain. Which client-side technology is being used maliciously, and what is the primary risk?

CSS is being used to hide malicious elements

JavaScript is being used to exfiltrate sensitive user input

Server-side code is being used to steal data

HTML is being used to redirect users to a phishing page

A user logs into a web application and closes the browser. When they reopen the browser and visit the site, they are still logged in. Which mechanism is most likely responsible for maintaining the session across browser restarts?

A persistent cookie with an expiration date

EC-CouncilSOC Essentials

Domain 1Objective 5

Web Application Fundamentals SCE Practice Questions (Page 2)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 6–10

6expert · hard
A company is designing a web application that must handle high traffic and provide fast responses. They plan to use a microservices architecture with multiple services communicating via REST APIs. Which component is essential to manage and route requests between the client and the appropriate microservice?
Select an answer first
7application · medium
A SOC analyst is reviewing a suspicious JavaScript file that was loaded by a web page. The script appears to collect form data and send it to an external domain. Which client-side technology is being used maliciously, and what is the primary risk?
Select an answer first
8application · medium
A user logs into a web application and closes the browser. When they reopen the browser and visit the site, they are still logged in. Which mechanism is most likely responsible for maintaining the session across browser restarts?
Select an answer first
9application · easy
A developer is building a mobile app that needs to retrieve user profile data from a web server. The server exposes a RESTful API. Which HTTP method and data format should the developer use to fetch a user's profile?
Select an answer first
10foundation · easy
Which data format is commonly used in RESTful APIs due to its lightweight, human-readable, and language-independent nature?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Web Application Fundamentals SCE Practice Questions (Page 2)

Questions 6–10

A SOC analyst is reviewing a suspicious JavaScript file that was loaded by a web page. The script appears to collect form data and send it to an external domain. Which client-side technology is being used maliciously, and what is the primary risk?

A user logs into a web application and closes the browser. When they reopen the browser and visit the site, they are still logged in. Which mechanism is most likely responsible for maintaining the session across browser restarts?

A developer is building a mobile app that needs to retrieve user profile data from a web server. The server exposes a RESTful API. Which HTTP method and data format should the developer use to fetch a user's profile?

Which data format is commonly used in RESTful APIs due to its lightweight, human-readable, and language-independent nature?

Keep studying — Computer Network and Security Fundamentals