Web Application Configuration Testing GWAPT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   During a configuration review of a PHP application, you discover that the server responds to requests for /config.php.bak with the file's contents. The application also returns detailed stack traces when a database query fails. Which two findings should be prioritized for remediation?

   • ARename the backup file to config.php.old and enable custom error pages
   • BDisable directory browsing and set display_errors to Off
   • CBlock requests for .bak files at the web server and set log_errors to On
   • DRemove backup files from the web root and set display_errors to Off
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   You have completed a configuration test and found several issues, including an exposed backup file, missing security headers, and verbose error messages. The client asks for a report that prioritizes remediation. What is the most appropriate way to present the findings?

   • AList all findings in alphabetical order with a generic severity rating.
   • BGroup findings by severity and provide specific remediation steps for each.
   • CProvide a single summary paragraph describing the overall security posture.
   • DInclude only the high-severity findings to avoid overwhelming the client.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A web application's TLS configuration supports TLS 1.0 and uses a self-signed certificate. The application is internet-facing and handles customer data. Which remediation should be prioritized?

   • AAdd more cipher suites and keep TLS 1.0 enabled
   • BEnable TLS 1.3 and keep the self-signed certificate
   • CDisable TLS 1.0 and obtain a certificate from a trusted CA
   • DUse a certificate from a CA and keep TLS 1.0 for legacy clients
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A web server is configured with the default installation settings. During testing, you find that the server allows the TRACE method and returns the full request headers in the response. What is the primary security concern?

   • AAn attacker could use TRACE to perform a cross-site tracing (XST) attack and steal cookies.
   • BThe TRACE method allows an attacker to bypass authentication.
   • CThe TRACE method allows an attacker to upload malicious files to the server.
   • DThe TRACE method exposes the server's internal IP address in the response.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An application uses a custom session management scheme where the session ID is derived from the user's IP address and a secret key. The application is behind a load balancer that sets the X-Forwarded-For header. What is the most significant security concern?

   • AThe session ID can be brute-forced because it is based on IP
   • BAn attacker can spoof the X-Forwarded-For header to predict or fixate another user's session ID
   • CThe session ID is not encrypted in transit
   • DThe session ID will change when the user's IP changes, causing logout
   Reveal Solution Discussion Select an answer first