An application sets a session cookie without the Secure flag, but the site is only accessible over HTTPS. A penetration tester wants to prove the risk. What is the most effective way to demonstrate the vulnerability?

Attempt to read the cookie via a cross-site scripting payload

Show that the cookie is visible in the browser's developer tools

Check if the cookie has the HttpOnly attribute

Perform a man-in-the-middle attack on an HTTP request to the same domain

What is the security risk of a directory with world-writable permissions on a web server?

It causes the server to run slower

It prevents users from accessing the site

Attackers can upload malicious files or modify existing content

It automatically encrypts all files

Which of the following best describes the scope of configuration testing in a web application penetration test?

Reviewing the web server, application server, and framework settings that affect security

Examining the source code for vulnerabilities

Evaluating the physical security of the data center

Testing the application's business logic for flaws

What is the primary security concern with an expired SSL/TLS certificate?

Users may not trust the site, and encrypted traffic may be intercepted

The certificate becomes invalid and encryption stops working

The certificate is automatically renewed

Which of the following is a sign of an insecure authentication configuration?

Multi-factor authentication enabled

Password stored in plaintext in the database

Password complexity requirements enforced

Account lockout after multiple failed attempts

GIAC Web Application Penetration Tester

Domain 3Objective 1

Web Application Configuration Testing GWAPT Practice Questions (Page 4)

Part of the Configuration and Deployment Testing domain, which makes up ~13% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 9–16 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

10concepts

Questions 16–20

16application · medium
An application sets a session cookie without the Secure flag, but the site is only accessible over HTTPS. A penetration tester wants to prove the risk. What is the most effective way to demonstrate the vulnerability?
Select an answer first
17foundation · easy
What is the security risk of a directory with world-writable permissions on a web server?
Select an answer first
18foundation · easy
Which of the following best describes the scope of configuration testing in a web application penetration test?
Select an answer first
19foundation · easy
What is the primary security concern with an expired SSL/TLS certificate?
Select an answer first
20foundation · easy
Which of the following is a sign of an insecure authentication configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWAPT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWAPT” is a trademark of its owner, used for identification only.