Parameter Tampering WAHS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst is reviewing a web application that uses a cookie named 'sessionID' to maintain user sessions. The analyst notices that the sessionID is a sequential number. Which of the following is the most significant risk?

   • AAn attacker could modify the sessionID to change the user's role.
   • BAn attacker could use the sessionID to perform SQL injection.
   • CAn attacker could use the sessionID to bypass CAPTCHA.
   • DAn attacker could predict or enumerate valid session IDs and hijack other users' sessions.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an example of a parameter that could be tampered with to gain unauthorized access?

   • AThe SSL certificate's public key.
   • BThe database's internal index structure.
   • CA URL query parameter like 'user_id=123' that determines which user's profile is displayed.
   • DThe server's IP address in the network configuration.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An application uses a signed token to protect a 'userID' parameter in a URL. The token is generated server-side and appended to the URL. Which of the following best describes the purpose of this token?

   • AIt ensures that the userID parameter has not been altered by the client.
   • BIt encrypts the userID so that it cannot be read by the client.
   • CIt prevents the userID from being cached by the browser.
   • DIt hides the userID from the server logs.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A development team is designing a new feature that allows users to download files. The team wants to prevent parameter tampering that could allow users to download files they are not authorized to access. The application already uses HTTPS and has a server-side session. Which of the following is the most secure and maintainable approach?

   • AUse a signed URL with an expiration time and a signature based on the file path.
   • BUse a server-side mapping between a random token and the actual file path, and validate the user's permission before serving the file.
   • CStore the file in a public folder and use a random filename that is hard to guess.
   • DPass the file path as a parameter and rely on HTTPS to prevent tampering.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is performing a code review of a web application. They find that the application uses a 'userID' parameter in the URL to display user profiles. The application also uses a session cookie for authentication. The team wants to identify whether the application is vulnerable to parameter tampering. Which of the following code patterns would most likely indicate a vulnerability?

   • AThe application validates the 'userID' parameter to ensure it is a positive integer.
   • BThe application uses a prepared statement to query the database with the 'userID' parameter.
   • CThe application logs the 'userID' parameter for audit purposes.
   • DThe application retrieves the user profile using the 'userID' parameter without checking that it matches the session user.
   Reveal Solution Discussion Select an answer first