Server-Side Request Forgery (SSRF) WAHS Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company runs a web application on Azure App Service. The application has a feature that fetches a user-supplied URL. You are concerned about SSRF targeting the Azure Instance Metadata Service (IMDS) at 169.254.169.254. You need to mitigate the risk while maintaining the feature. Which of the following is the most effective approach?

   • AUse Azure Firewall to block outbound traffic to 169.254.169.254 from the App Service.
   • BImplement an application-level filter that blocks requests to 169.254.169.254 and other link-local addresses, and use an allowlist of approved domains.
   • CRely on Azure's built-in protection that automatically blocks SSRF attacks.
   • DDisable the feature entirely to eliminate the SSRF risk.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the core characteristic of a Server-Side Request Forgery (SSRF) vulnerability?

   • AThe attacker tricks a user's browser into making requests to unintended destinations.
   • BThe attacker intercepts and modifies requests between the client and server.
   • CThe attacker causes the application server to make requests to unintended destinations on the attacker's behalf.
   • DThe attacker injects malicious code into server logs to execute commands on the server.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following application features is most likely to be vulnerable to SSRF?

   • AA webhook configuration that lets users specify a URL to receive event notifications.
   • BA search feature that queries a database for matching records.
   • CA file upload feature that stores files on the server's local filesystem.
   • DA password reset feature that sends an email with a reset link.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An attacker exploits an SSRF vulnerability to access the cloud metadata service. Which of the following pieces of information is the attacker most likely to obtain?

   • AThe private key used for SSH access to the instance.
   • BThe root password of the cloud account.
   • CTemporary IAM credentials associated with the instance's role.
   • DThe source code of the web application.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is network segmentation an important defense against SSRF?

   • AIt automatically validates all URLs before they are fetched.
   • BIt limits the impact of SSRF by restricting the server's access to internal resources.
   • CIt encrypts all traffic between the server and internal services.
   • DIt prevents the server from making any outbound requests.
   Reveal Solution Discussion Select an answer first