Arbitrary File Upload and Download WAHS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A web application allows users to upload profile pictures without any restrictions on file type or content. What is the primary security risk of this unrestricted upload functionality?

   • AThe server may store the file with a predictable name, enabling directory enumeration.
   • BAn attacker can upload a malicious file that the server may store and later execute, leading to remote code execution.
   • CThe upload functionality will consume excessive bandwidth, causing a denial of service.
   • DThe server will automatically execute any uploaded file, regardless of its location or extension.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a mitigation strategy for arbitrary file download vulnerabilities?

   • ADisable the download feature entirely.
   • BUse a whitelist of allowed filenames and validate the input.
   • CAllow users to specify any file path in the download parameter.
   • DRely on the operating system to prevent unauthorized access.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Why is client-side validation alone insufficient for preventing arbitrary file uploads?

   • AIt is too slow for large files.
   • BIt can be bypassed by intercepting and modifying the request.
   • CIt only works in modern browsers.
   • DIt cannot check file content.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is path canonicalization in the context of mitigating arbitrary file downloads?

   • AStoring files in a database instead of the filesystem.
   • BConverting a user-supplied path to its absolute, normalized form to detect traversal sequences.
   • CEncrypting the file path to prevent tampering.
   • DCompressing the file before download to reduce bandwidth.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   An attacker uploads a file named 'shell.php' to a vulnerable web application. What is the most likely attack vector being used?

   • APhishing file upload
   • BMIME type spoofing
   • CMalware upload
   • DWeb shell upload
   Reveal Solution Discussion Select an answer first