Authentication Bypass WAHS Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which attack involves stealing a valid session token to impersonate an authenticated user?

   • ACross-site request forgery
   • BSQL injection
   • CSession hijacking
   • DDenial of service
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A mobile app authenticates users through a login screen, but the underlying API has an endpoint /api/v1/user/profile that returns user data without requiring an authentication token. The app uses this endpoint only after login, but the endpoint itself is not protected. What is the vulnerability?

   • ASession fixation because the API does not rotate tokens.
   • BInsecure Direct Object Reference because the endpoint uses user IDs.
   • CUnsecured API endpoint that allows direct access to user data without authentication.
   • DClient-side authentication bypass because the app hides the endpoint.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   How can an attacker exploit a predictable password reset token?

   • ABy guessing or brute-forcing the token to reset the victim's password
   • BBy enabling two-factor authentication
   • CBy using a stronger password for the victim's account
   • DBy clearing the browser cache
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which scenario is a common example of an authentication bypass?

   • AAn attacker uses a brute-force tool to guess a user's password
   • BAn attacker changes a hidden form field to 'admin=true' to gain administrative access
   • CAn attacker installs a keylogger on a user's machine to capture keystrokes
   • DAn attacker sends a crafted email to trick a user into revealing their password
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A web application restricts access to the admin console by checking the HTTP method: only POST requests are allowed. The server-side code processes the request regardless of method, but the access control middleware only blocks GET. What is the simplest way an attacker could bypass the restriction?

   • AReplay a previously captured POST request.
   • BSend a PUT request to the admin console.
   • CModify the Referer header to appear as if the request came from an admin page.
   • DUse a browser extension to disable JavaScript.
   Reveal Solution Discussion Select an answer first