Web Application Overview GWAPT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A web application allows users to change their email address. After the change, the application sends a confirmation email to the new address. A tester discovers that the confirmation link does not require authentication and uses a token that is the user's new email address base64-encoded. What is the most likely impact?

   • AThe application is vulnerable to CSRF
   • BThe user's session can be hijacked
   • CAn attacker can confirm an email change for any user if they know the new email
   • DThe application leaks the user's email in logs
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A web application has a file upload feature that accepts images. The server validates the file's magic bytes and re-encodes the image to strip embedded scripts. However, the application also allows users to download their uploaded files with a user-controlled filename. A tester uploads a benign image and then downloads it with a filename containing a script payload. Which vulnerability is most likely to be exploited?

   • AReflected XSS via the Content-Disposition header
   • BCSRF on the download endpoint
   • CSQL injection via the filename
   • DStored XSS in the image file
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In a typical three-tier web application architecture, which component is primarily responsible for executing business logic and coordinating requests between the client and the data storage layer?

   • AThe database server
   • BThe network firewall
   • CThe application server
   • DThe web browser
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A web application uses a login form that submits credentials over HTTPS. After a successful login, the server responds with a 302 redirect to /dashboard and sets a session cookie. The tester notices that the session cookie is not marked with the Secure attribute. Which HTTP-related action should the tester recommend to mitigate the risk of session hijacking?

   • AChange the 302 redirect to a 200 OK response with the dashboard content
   • BUse a longer random session ID
   • CAdd the HttpOnly attribute to the session cookie
   • DSet the Secure flag on the session cookie so the browser only sends it over HTTPS
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a primary reason why input validation is considered a critical security control in web applications?

   • AIt prevents malformed or malicious data from being processed by the application, reducing the risk of injection attacks.
   • BIt ensures that only authenticated users can access the application.
   • CIt automatically patches known vulnerabilities in third-party libraries.
   • DIt encrypts all data transmitted between the client and server.
   Reveal Solution Discussion Select an answer first