Application Exploitation GDAT Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is deploying a new web application and wants to implement a defense-in-depth strategy against application exploitation. The application will handle sensitive data and must be highly available. Which of the following is the most comprehensive approach?

   • AImplement secure coding practices, a WAF, and regular vulnerability scanning
   • BImplement a strict change management process
   • CDeploy a WAF and rely on it as the primary defense
   • DUse only input validation and output encoding
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   During a penetration test, an analyst discovers that a legacy web application reflects user input in an error message without proper encoding. The analyst wants to demonstrate a realistic attack that could steal a victim's session cookie. Which of the following exploitation techniques is most appropriate?

   • APerform a man-in-the-middle attack to intercept the cookie in transit
   • BSend a malformed HTTP request to trigger a buffer overflow in the web server
   • CInject a `<script>` tag that sends the document.cookie value to an attacker-controlled server
   • DUse SQL injection to extract the session cookie from the database
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A penetration tester is attempting to exploit a web application that uses a strict Content Security Policy (CSP) that disallows inline scripts and only allows scripts from the application's own domain. The tester finds a DOM-based XSS vulnerability that injects data into the page. Which technique would be MOST likely to bypass the CSP and execute JavaScript?

   • AUse an <img> tag with an onerror attribute
   • BInject an inline <script> tag with the payload
   • CUse an AngularJS expression or other framework-specific gadget that is allowed by the CSP
   • DUse a data: URI in a script src attribute
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which vulnerability class involves an attacker injecting malicious client-side scripts into web pages that are then executed by other users' browsers?

   • ABuffer overflow
   • BXML external entity (XXE) injection
   • CSQL injection
   • DCross-site scripting (XSS)
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security architect is reviewing a web application that handles sensitive data. The application is built with a modern framework that uses parameterized queries for all database access. However, a legacy module still concatenates user input directly into SQL statements. The team cannot remove the legacy module immediately. Which combination of controls would provide the BEST defense-in-depth while the legacy module is being rewritten?

   • ADisable the legacy module and require users to use a new interface
   • BUse a VPN for all users and enforce strong passwords
   • CDeploy a WAF with SQL injection rules and restrict the database account to least privilege
   • DIncrease logging and monitor database queries
   Reveal Solution Discussion Select an answer first