In a Server-Side Request Forgery (SSRF) attack, what does the attacker typically exploit?

A web application feature that fetches remote resources based on user-supplied URLs.

A vulnerability in the client-side JavaScript code.

A misconfigured firewall that allows external access to internal services.

A weak password on the database server.

Which technique is commonly used to bypass a web application firewall (WAF) that filters SQL injection keywords like 'UNION' or 'SELECT'?

Using alternative encodings such as URL encoding or Unicode normalization.

Using a different HTTP method such as POST instead of GET.

Sending the request over HTTPS.

Increasing the request timeout.

A web application accepts XML data from authenticated partners. During a test, you submit an XML payload that defines an external entity pointing to 'http://169.254.169.254/latest/meta-data/'. The application returns the content of that URL in the response. Which of the following is the most likely vulnerability and immediate impact?

XPath injection that bypasses authentication.

XML injection that corrupts the application's database.

XXE that allows reading cloud instance metadata, potentially exposing IAM credentials.

SSRF that allows scanning internal network ports.

GIAC Cloud Penetration Tester

Domain 5Objective 2

Web Application Attacks GCPN Practice Questions (Page 3)

Part of the Application and CI/CD Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

10concepts

Questions 11–15

11foundation · easy
In a Server-Side Request Forgery (SSRF) attack, what does the attacker typically exploit?
Select an answer first
12foundation · easy
Which tool is specifically designed to automate the detection and exploitation of SQL injection vulnerabilities?
Select an answer first
13foundation · easy
Which technique is commonly used to bypass a web application firewall (WAF) that filters SQL injection keywords like 'UNION' or 'SELECT'?
Select an answer first
14foundation · easy
Which feature of Burp Suite allows a penetration tester to intercept and modify HTTP requests before they reach the web server?
Select an answer first
15application · medium
A web application accepts XML data from authenticated partners. During a test, you submit an XML payload that defines an external entity pointing to 'http://169.254.169.254/latest/meta-data/'. The application returns the content of that URL in the response. Which of the following is the most likely vulnerability and immediate impact?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Web Application Attacks GCPN Practice Questions (Page 3)

Questions 11–15

In a Server-Side Request Forgery (SSRF) attack, what does the attacker typically exploit?

Which tool is specifically designed to automate the detection and exploitation of SQL injection vulnerabilities?

Which technique is commonly used to bypass a web application firewall (WAF) that filters SQL injection keywords like 'UNION' or 'SELECT'?

Which feature of Burp Suite allows a penetration tester to intercept and modify HTTP requests before they reach the web server?

Keep studying — Application and CI/CD Security