Web Communication Security GSEC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company's web application allows users to upload profile pictures. The security team is concerned about cross-site scripting (XSS) attacks via uploaded content. They want to implement a defense-in-depth measure that restricts the browser from executing scripts that are not from the application's own origin. Which HTTP response header should be configured?

   • AX-Frame-Options: DENY
   • BX-Content-Type-Options: nosniff
   • CContent-Security-Policy: default-src 'self'
   • DStrict-Transport-Security: max-age=31536000
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is investigating a session hijacking incident. The victim's session token was captured by an attacker who was on the same network. The application uses HTTPS, but the analyst finds that the session cookie does not have the Secure attribute. Which of the following best describes how the attacker captured the token?

   • AThe attacker guessed the session token because it was too short.
   • BThe attacker used a man-in-the-middle attack to decrypt the HTTPS traffic.
   • CThe attacker performed an SSL stripping attack, downgrading the connection to HTTP, and the cookie was sent in plaintext.
   • DThe attacker exploited a cross-site scripting vulnerability to read the cookie.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An administrator is configuring a new web server for a public-facing site. The site will handle sensitive user data. The administrator wants to ensure that all communication is encrypted and that the server's identity is authenticated. Which set of actions best achieves this?

   • AEnable HTTP/2 and disable HTTPS to improve performance.
   • BConfigure a WAF and use only HTTP for simplicity.
   • CUse a self-signed certificate and enable TLS 1.0 for maximum compatibility.
   • DInstall a certificate from a trusted CA, enable TLS 1.2 or higher, and redirect HTTP to HTTPS.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security analyst is investigating a suspected session hijacking attack. The analyst notices that the application sets a session cookie without the Secure attribute, and the site is accessible over both HTTP and HTTPS. The analyst also observes that the application does not regenerate the session ID after login. Which combination of weaknesses makes session hijacking easier?

   • AThe cookie has a short expiration time, and the session ID is random.
   • BThe cookie is HttpOnly, and the session ID is regenerated after login.
   • CThe cookie can be transmitted over HTTP, and the session ID remains the same before and after authentication.
   • DThe site uses HSTS, and the cookie has SameSite=Strict.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What does a browser do when it encounters an HTTPS certificate that is signed by an untrusted certificate authority?

   • AIt encrypts the connection using the certificate's public key anyway
   • BIt automatically accepts the certificate and proceeds with the connection
   • CIt displays a security warning and allows the user to decide whether to proceed
   • DIt blocks the connection without any user interaction
   Reveal Solution Discussion Select an answer first