A web application is deployed behind a reverse proxy that terminates TLS. The application sets a session cookie without the Secure flag. An attacker on the internal network can sniff traffic between the proxy and the application server. Which of the following is the most effective mitigation?

Use a short session timeout to limit the window of opportunity.

Set the Secure flag on the session cookie and ensure the application is only accessible via HTTPS from the client.

Encrypt the traffic between the reverse proxy and the application server (e.g., using TLS or a VPN).

Set the HttpOnly flag on the session cookie.

Which attack is a common method for session sidejacking?

Phishing to obtain the user's password

Network sniffing over an unencrypted Wi-Fi network

SQL injection to dump the session table

Denial-of-service to disrupt the session

Why is it important to clear the session cookie on the client side during logout?

To increase the session timeout

To prevent the browser from reusing the old session token

What should a secure logout mechanism do on the server side?

Only clear the client-side cookie

Redirect the user to the login page

Invalidate and delete the session data

GIAC Web Application Penetration Tester

Domain 4Objective 2

Web Application Session Management GWAPT Practice Questions (Page 5)

Part of the Authentication and Session Management domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

9concepts

Questions 21–25

21foundation · easy
Which characteristic most directly determines the strength of a session identifier against brute-force guessing?
Select an answer first
22expert · hard
A web application is deployed behind a reverse proxy that terminates TLS. The application sets a session cookie without the Secure flag. An attacker on the internal network can sniff traffic between the proxy and the application server. Which of the following is the most effective mitigation?
Select an answer first
23foundation · easy
Which attack is a common method for session sidejacking?
Select an answer first
24foundation · easy
Why is it important to clear the session cookie on the client side during logout?
Select an answer first
25foundation · easy
What should a secure logout mechanism do on the server side?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWAPT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWAPT” is a trademark of its owner, used for identification only.