HTTP(S) Analysis and Attacks GSOC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which HTTP traffic pattern is commonly associated with web shell usage?

   • APOST requests to a script with encoded parameters
   • BOPTIONS requests to the server
   • CGET requests for static images
   • DHEAD requests to the root path
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why do attackers prefer HTTP for botnet C2 communication?

   • AIt is faster than other protocols
   • BIt is encrypted by default
   • CIt blends in with normal web traffic and is often allowed through firewalls
   • DIt uses UDP which is less monitored
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which tool would you use to capture raw HTTP packets on the command line?

   • ANmap
   • BMetasploit
   • Ctcpdump
   • DBurp Suite
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   During the TLS handshake, what does the client use to verify the server's certificate?

   • AThe public key of a trusted certificate authority
   • BThe client's session cookie
   • CThe server's private key
   • DThe HTTP status code
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary characteristic of a CSRF attack?

   • AIt encrypts the victim's files for ransom
   • BIt injects malicious SQL into a database
   • CIt steals the victim's session cookie via XSS
   • DIt tricks the victim's browser into sending an unwanted request to a trusted site
   Reveal Solution Discussion Select an answer first