CORS Misconfiguration WAHS Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   A web application at https://shop.example.com needs to allow a partner site at https://partner.example.org to read product data via JavaScript. By default, the browser's Same-Origin Policy would block the partner site's JavaScript from reading the response. Which HTTP response header is used to relax this restriction?

   • AStrict-Transport-Security
   • BX-Frame-Options
   • CAccess-Control-Allow-Origin
   • DContent-Security-Policy
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Why is a CORS misconfiguration considered a broken access control issue?

   • AIt exposes the server's internal IP address to the client.
   • BIt allows an attacker to bypass authentication entirely.
   • CIt prevents the server from validating user input.
   • DIt can allow an unauthorized origin to read data that should be restricted to the intended origin.
   Reveal Solution Discussion Select an answer first
3. 33expert · hard

   A company is deciding whether to fix a CORS misconfiguration that reflects arbitrary origins with credentials. The API is used by a public website and an internal tool. The public website does not use cookies; the internal tool does. The company has limited development resources and must prioritize fixes. What is the most important consideration?

   • AThe public website is at higher risk because it is exposed to the internet
   • BBoth are equally at risk because the CORS misconfiguration affects all origins
   • CNeither is at risk because the company uses HTTPS
   • DThe internal tool is at higher risk because it uses cookies and is accessible from the victim's browser on the corporate network
   Reveal Solution Discussion Select an answer first