HTTP(S) Analysis and Attacks GSOC Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is the primary purpose of TLS in HTTPS?

   • AEncrypt HTTP traffic to provide confidentiality and integrity
   • BCompress HTTP data to reduce bandwidth
   • CBlock malicious HTTP requests
   • DAuthenticate users with passwords
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the goal of a directory traversal attack?

   • ATo inject malicious scripts into the database
   • BTo access files outside the web server's root directory
   • CTo redirect users to a phishing site
   • DTo overload the server with requests
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which HTTP status code class indicates that the client's request was malformed or unauthorized?

   • A5xx
   • B3xx
   • C4xx
   • D2xx
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A SOC analyst is examining a packet capture from a user's workstation. The analyst sees a GET request to https://bank.example/transfer with the URI /transfer?amount=1000&to=attacker_account. The request includes a Cookie header with a valid session ID for the banking site, but the Referer header shows the request originated from https://evil.example/forum. Which HTTP-based attack is best indicated by this traffic?

   • AHTTP Request Smuggling, because the request has both a Cookie and a Referer header
   • BSession Fixation, because the session ID in the Cookie header was set by the attacker
   • CCross-Site Request Forgery (CSRF), because the user's browser is sending a valid session cookie with a request that originated from a different site
   • DReflected Cross-Site Scripting (XSS), because the amount and account parameters are reflected in the response
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which pattern in an HTTP request is a strong indicator of a SQL injection attempt?

   • AA POST request with a JSON body
   • BA long User-Agent string
   • CA single quote (') in a parameter value
   • DA 404 status code
   Reveal Solution Discussion Select an answer first