Privilege Escalation WAHS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following session management practices helps prevent privilege escalation?

   • AStoring the user's role in the session cookie without encryption.
   • BUsing a long session timeout to keep users logged in longer.
   • CAllowing multiple concurrent sessions for the same user.
   • DRegenerating the session ID after login to prevent session fixation.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A banking application allows users to transfer funds by submitting a POST request to /transfer with 'fromAccount' and 'toAccount' parameters. A user changes 'fromAccount' to another user's account number and successfully initiates a transfer. What is the primary vulnerability and the most effective mitigation?

   • AVertical privilege escalation; require a one-time password for all transfers.
   • BMissing function-level access control; restrict the transfer endpoint to admin users.
   • CCross-site request forgery; add a CSRF token to the transfer form.
   • DInsecure direct object reference; implement object-level authorization to ensure the 'fromAccount' belongs to the authenticated user.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A web application uses a role-based access control (RBAC) system. A user with the 'editor' role discovers they can access the 'publish' function, which is restricted to 'publisher' role. The application checks the role at the beginning of the request, but the user can change the role in the session by manipulating a cookie. What is the most effective fix?

   • AStore the role in a server-side session and never trust client-side role data.
   • BEncrypt the cookie to prevent modification.
   • CUse a longer, random session cookie to prevent guessing.
   • DAdd a second factor authentication for the publish function.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An attacker discovers that by adding the parameter 'role=admin' to a request, they can gain administrative privileges in a web application. Which type of privilege escalation is this?

   • AHorizontal privilege escalation
   • BDenial of service
   • CSession hijacking
   • DVertical privilege escalation
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a best practice to prevent privilege escalation in a web application?

   • ARelying on client-side JavaScript to hide administrative links from regular users.
   • BImplementing server-side authorization checks for every function and resource access.
   • CUsing obscure URLs for administrative functions to keep them secret.
   • DStoring user roles in cookies and trusting them without server-side validation.
   Reveal Solution Discussion Select an answer first