A tester is analyzing a web application's session management. The tester suspects that session tokens are predictable and wants to capture multiple tokens to analyze their pattern. Which tool is best for this task?

An encoding tool like CyberChef

A directory enumeration tool like gobuster

You are assessing the SSL/TLS configuration of a web server that supports both old and new clients. You need to identify weak ciphers and protocol versions that should be disabled, but you also need to ensure that the assessment does not disrupt the service for legitimate users. Which approach is best?

Use a vulnerability scanner with default settings

Use a passive TLS scanner that analyzes the server's responses without initiating full handshakes

Use a web crawler to check the site's TLS configuration

Use an active TLS scanner that tests all ciphers and protocols

You are testing a large web application with many dynamic pages. You need to map the application's endpoints, but the application uses JavaScript to load content asynchronously. You also need to avoid missing endpoints that are only accessible after authentication. Which approach is best?

Use a simple crawler that only follows static HTML links

Use a subdomain enumeration tool to find other hosts

Use a directory brute-forcing tool with a large wordlist

Use a crawler that executes JavaScript and supports authenticated sessions

What is the primary goal of fuzzing a web application parameter?

To map the directory structure of the web server

To discover input validation flaws by sending unexpected or malformed data

To enumerate valid usernames on the application

To measure the performance of the application under load

You are testing a web application that uses a content management system (CMS). The CMS has a known directory structure, but you suspect custom plugins have created additional directories. You need to discover these hidden directories efficiently without causing excessive load on the server. Which approach is best?

Use a subdomain enumeration tool to find related hosts

Use a directory brute-forcing tool with a custom wordlist that includes common plugin names and paths

Use a web crawler to follow all links from the homepage

Use an automated vulnerability scanner with default settings

GIAC Web Application Penetration Tester

Domain 2Objective 2

Web Application Testing Tools GWAPT Practice Questions (Page 8)

Part of the Information Gathering and Tooling domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 11–19 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

12concepts

Questions 36–40

36application · medium
A tester is analyzing a web application's session management. The tester suspects that session tokens are predictable and wants to capture multiple tokens to analyze their pattern. Which tool is best for this task?
Select an answer first
37expert · hard
You are assessing the SSL/TLS configuration of a web server that supports both old and new clients. You need to identify weak ciphers and protocol versions that should be disabled, but you also need to ensure that the assessment does not disrupt the service for legitimate users. Which approach is best?
Select an answer first
38expert · hard
You are testing a large web application with many dynamic pages. You need to map the application's endpoints, but the application uses JavaScript to load content asynchronously. You also need to avoid missing endpoints that are only accessible after authentication. Which approach is best?
Select an answer first
39foundation · easy
What is the primary goal of fuzzing a web application parameter?
Select an answer first
40expert · hard
You are testing a web application that uses a content management system (CMS). The CMS has a known directory structure, but you suspect custom plugins have created additional directories. You need to discover these hidden directories efficiently without causing excessive load on the server. Which approach is best?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWAPT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWAPT” is a trademark of its owner, used for identification only.

Web Application Testing Tools GWAPT Practice Questions (Page 8)

Questions 36–40

A tester is analyzing a web application's session management. The tester suspects that session tokens are predictable and wants to capture multiple tokens to analyze their pattern. Which tool is best for this task?

You are testing a large web application with many dynamic pages. You need to map the application's endpoints, but the application uses JavaScript to load content asynchronously. You also need to avoid missing endpoints that are only accessible after authentication. Which approach is best?

What is the primary goal of fuzzing a web application parameter?

Keep studying — Information Gathering and Tooling