AJAX Technologies and Security Strategies GWEB Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which attack occurs when an attacker tricks a user's browser into sending an AJAX request to a vulnerable web application where the user is authenticated?

   • ACross-site request forgery (CSRF)
   • BSQL injection
   • CMan-in-the-middle (MITM)
   • DCross-site scripting (XSS)
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security analyst is investigating an incident where an attacker submitted a JSON payload to an AJAX endpoint that processed user preferences. The payload contained `"__proto__": {"isAdmin": true}`. The application then granted the user administrative privileges. Which vulnerability was exploited and what is the most effective mitigation?

   • AJSON injection; validate all keys against a whitelist before processing.
   • BMass assignment; disable the `__proto__` property in the database schema.
   • CParameter pollution; use `JSON.parse` with a reviver function to strip dangerous keys.
   • DPrototype pollution; merge user input into a fresh object using `Object.assign` with a null-prototype object.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A developer is implementing a JSON API that accepts a `filter` object from AJAX requests. The object is used to build a database query. A tester finds that sending `filter[__proto__][admin]=true` pollutes the object prototype and changes the application's authorization logic. The developer wants to fix this without breaking legitimate filters. Which approach is MOST secure?

   • AUse a recursive merge function that skips keys starting with an underscore.
   • BUse `JSON.parse` with a reviver that deletes `__proto__` keys.
   • CReject any key named `__proto__`, `constructor`, or `prototype` in the filter object.
   • DDeep-freeze the filter object after parsing.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a typical AJAX flow, what is the correct sequence of events?

   • AServer pushes data to the browser, JavaScript processes it, then the browser sends a request.
   • BBrowser sends an HTTP request via JavaScript, server processes it, browser receives the response and updates the page.
   • CBrowser reloads the page, JavaScript runs, then sends a request to the server.
   • DJavaScript sends a request, the browser blocks until the response arrives, then the page reloads.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A developer configures CORS on an API to allow `https://trusted.example.com`. A security review notes that the server reflects any origin from the `Origin` header when the request includes a certain cookie. An attacker discovers they can set the `Origin` header to `https://trusted.example.com.evil.com` and the server allows it. What is the MOST likely root cause?

   • AThe server does not validate the `Origin` header at all and always returns `Access-Control-Allow-Origin: *`.
   • BThe server does not include `Vary: Origin` in the response.
   • CThe server allows requests with `Origin: null`.
   • DThe server uses a substring match on the `Origin` header instead of an exact match.
   Reveal Solution Discussion Select an answer first