GIAC (SANS)

GIAC Certified Web Application Defender

GWEB

The GIAC Certified Web Application Defender (GWEB) certification validates your ability to secure web applications against the most common and dangerous vulnerabilities. It is designed for developers, security analysts, and architects who need hands-on skills to detect and prevent input validation flaws, cross-site scripting, SQL injection, and more. Earning GWEB proves you can implement effective defenses and protect your organization's web assets.

Practice Free Questions

5Domains

15Objectives

141Practice pages

674Free questions

GWEB free practice questions

Choose any objective and open any question page — no sign-in required.

Web Application and HTTP Basics

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Web Architecture and Configuration

56 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–56

Authentication

55 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55

Session Security & Business Logic

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

Access Control

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

CSRF

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Cross Origin Policy Attacks and Mitigation

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

AJAX Technologies and Security Strategies

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Modern Application Framework Issues and Serialization

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Web Services Security

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

File Upload, Response Readiness, Proactive Defense

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Security Testing

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Encryption and Protecting Sensitive Data

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Leading Edge Technologies and Web Security

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (15 objectives · 141 pages).

GIAC Certified Web Application Defender

GWEB free practice questions

Domain 1 · Web Application Foundations16% of practice bank · 2 objectives · 105 questions16%

Domain 2 · Authentication and Session Management22% of practice bank · 3 objectives · 150 questions22%

Domain 3 · Input Handling and Injection Flaws16% of practice bank · 3 objectives · 106 questions16%

Domain 4 · Advanced Threats and Defense27% of practice bank · 4 objectives · 181 questions27%

Domain 5 · Security Testing and Cryptography20% of practice bank · 3 objectives · 132 questions20%