A Python script uses the requests library to call an API that sometimes returns a 302 redirect to a login page when the session expires. The script currently follows redirects automatically and then fails because the final response is an HTML login page instead of JSON. The team needs to detect the redirect and re-authenticate. Which approach is most robust?

Keep following redirects and check the final response's Content-Type to see if it is HTML.

Catch the requests.TooManyRedirects exception and re-authenticate.

Use a session object and set max_redirects to 0.

Set allow_redirects=False, check for a 302 status code, and then re-authenticate if detected.

What is a primary defense against SQL injection when interacting with databases in Python?

Using string concatenation to build queries

GIAC Python Coder

Domain 3Objective 2

Website Interaction GPYC Practice Questions (Page 4)

Part of the Network and Web Interaction domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

12concepts

Questions 16–20

16foundation · easy
Which of the following is a common web vulnerability that involves injecting malicious code into a website's output?
Select an answer first
17expert · hard
A Python script uses the requests library to call an API that sometimes returns a 302 redirect to a login page when the session expires. The script currently follows redirects automatically and then fails because the final response is an HTML login page instead of JSON. The team needs to detect the redirect and re-authenticate. Which approach is most robust?
Select an answer first
18foundation · easy
What is a primary defense against SQL injection when interacting with databases in Python?
Select an answer first
19foundation · easy
Which Python library is commonly used to implement WebSocket clients?
Select an answer first
20foundation · easy
In the requests library, which parameter is used to provide credentials for Basic Authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPYC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPYC” is a trademark of its owner, used for identification only.

Website Interaction GPYC Practice Questions (Page 4)

Questions 16–20

Which of the following is a common web vulnerability that involves injecting malicious code into a website's output?

What is a primary defense against SQL injection when interacting with databases in Python?

Which Python library is commonly used to implement WebSocket clients?

In the requests library, which parameter is used to provide credentials for Basic Authentication?

Keep studying — Network and Web Interaction