What is the primary purpose of a session ID stored in a cookie?

To permanently store user preferences on the server

To store the user's password in an encrypted format

To encrypt the communication channel between client and server

To allow the server to associate a user's requests with their session data

A mobile app needs to authenticate users against a web service. The service exposes a RESTful API that returns a token after successful login. Which HTTP method and data format should the app use to send the login credentials?

POST with JSON in the request body

DELETE with JSON in the request body

GET with JSON in the URL query string

PUT with XML in the request body

A web application allows users to transfer money. An attacker crafts a malicious page that, when visited by an authenticated user, automatically submits a form to the bank's website to transfer funds. The bank's application does not verify the origin of the request. Which vulnerability is being exploited?

Cross-site request forgery (CSRF)

What is the primary role of a server-side web framework (e.g., Express.js, Django, Ruby on Rails)?

To secure the network connection between client and server

To replace the need for a database in web applications

To provide a structured environment for building and organizing server-side code

To render web pages directly in the user's browser

EC-CouncilSOC Essentials

Domain 1Objective 5

Web Application Fundamentals SCE Practice Questions (Page 9)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 41–45

41foundation · easy
In the HTTP request-response model, which component is responsible for initiating communication with a web server?
Select an answer first
42foundation · easy
What is the primary purpose of a session ID stored in a cookie?
Select an answer first
43application · easy
A mobile app needs to authenticate users against a web service. The service exposes a RESTful API that returns a token after successful login. Which HTTP method and data format should the app use to send the login credentials?
Select an answer first
44application · medium
A web application allows users to transfer money. An attacker crafts a malicious page that, when visited by an authenticated user, automatically submits a form to the bank's website to transfer funds. The bank's application does not verify the origin of the request. Which vulnerability is being exploited?
Select an answer first
45foundation · easy
What is the primary role of a server-side web framework (e.g., Express.js, Django, Ruby on Rails)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Web Application Fundamentals SCE Practice Questions (Page 9)

Questions 41–45

In the HTTP request-response model, which component is responsible for initiating communication with a web server?

What is the primary purpose of a session ID stored in a cookie?

A mobile app needs to authenticate users against a web service. The service exposes a RESTful API that returns a token after successful login. Which HTTP method and data format should the app use to send the login credentials?

What is the primary role of a server-side web framework (e.g., Express.js, Django, Ruby on Rails)?

Keep studying — Computer Network and Security Fundamentals