Web Application Fundamentals SCE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security assessment reveals that a web application is vulnerable to SQL injection in its search function. The development team wants to fix the issue without rewriting the entire application. Which remediation is most effective and least likely to introduce new issues?

   • AEscape single quotes in user input before querying
   • BAdd a Web Application Firewall (WAF) rule to block suspicious requests
   • CDisable error messages that reveal database details
   • DUse parameterized queries for all database access
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A web application has a search box that takes a user's input and uses it in a SQL query: SELECT * FROM products WHERE name = 'user_input'. An attacker enters ' OR '1'='1. What is the likely result and the best fix?

   • AThe query returns only the product named ' OR '1'='1; use output encoding.
   • BThe query returns all products because the condition is always true; use parameterized queries.
   • CThe query returns an error because of the single quotes; use a WAF.
   • DThe query returns no products because the input is invalid; use input validation.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A SOC analyst notices that a web application's login page is served over HTTP, and after login, the session cookie is sent without encryption. Which control should be implemented to protect the session cookie during transmission?

   • AEnable HTTPS and set the Secure flag on cookies
   • BImplement a custom encryption algorithm in the application
   • CUse a JavaScript-based encryption of the cookie value
   • DSet the HttpOnly flag on the session cookie
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A small e-commerce site is built with a JavaScript frontend that calls a REST API. The API receives product search queries, queries a database, and returns results as JSON. A developer wants to add a new feature that shows the number of items in the user's shopping cart on every page. Where should this logic be implemented to ensure consistency and security?

   • AIn the server-side API, which retrieves the cart count from the database and returns it in the JSON response.
   • BIn the client-side JavaScript, which calculates the count from the items currently displayed in the browser's local storage.
   • CIn the database as a stored procedure that is called directly by the browser via a SQL connection.
   • DIn the middleware layer as a static HTML snippet that is injected into every page response.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A SOC analyst is investigating a suspicious request to a web application. The request contains a parameter that appears to be a script tag with JavaScript code. The application reflects the parameter value in the response without any sanitization. Which client-side technology is being abused, and what is the likely impact?

   • ACSS is being used to exfiltrate data via style attributes
   • BServer-side code is executing the script, leading to remote code execution
   • CJavaScript is being executed in the user's browser, leading to XSS
   • DHTML is being used to inject malicious markup, leading to content spoofing
   Reveal Solution Discussion Select an answer first