Objective 1.02 Explain How Specific Security Policies Mitigate Various Web Application Attacks 303 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What does ASM primarily inspect in user input to detect cross-site scripting (XSS) attacks?

   • AScript patterns and encoding
   • BHTTP response headers
   • CFile upload size
   • DTCP sequence numbers
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does ASM validate input to help prevent LFI attacks?

   • AAgainst known local file paths
   • BAgainst known malware signatures
   • CAgainst known XSS patterns
   • DAgainst known SQL injection patterns
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which ASM approach helps prevent XSS by understanding where input will be placed in the application's response?

   • ARate limiting
   • BContext-aware validation
   • CFile type restriction
   • DCSRF token generation
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which ASM technique is used to detect command injection attempts in user input?

   • AFile upload malware scanning
   • BCookie session fixation prevention
   • CCSRF token validation
   • DSignature matching for shell metacharacters
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which character sequence does ASM block to prevent HTTP response splitting?

   • A<script>
   • BOR 1=1
   • C../
   • DCRLF (\r\n)
   Reveal Solution Discussion Select an answer first