AJAX Technologies and Security Strategies GWEB Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A web application allows users to upload a profile picture via AJAX. The image is stored on a different subdomain (`cdn.example.com`) and displayed in the main app (`app.example.com`). A security review found that the upload endpoint does not validate the file content type and serves user-uploaded files with `Content-Type: image/png` regardless of actual content. Which combination of controls is most effective to prevent stored XSS via uploaded files?

   • ASet the `Content-Type` to `application/octet-stream` and rely on the browser's MIME sniffing.
   • BUse a CSP `img-src` directive that only allows images from `cdn.example.com`.
   • CStore the file on a separate domain and require CORS for all requests.
   • DValidate the file signature (magic bytes) and serve the file with `Content-Disposition: attachment` and `X-Content-Type-Options: nosniff`.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the risk of setting the CORS header 'Access-Control-Allow-Origin: *' on an AJAX endpoint that returns sensitive user data?

   • AAny website can read the response from the endpoint
   • BThe browser will block all requests to the endpoint
   • CThe endpoint will be vulnerable to XSS
   • DThe endpoint will be vulnerable to SQL injection
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which client-side security control is specifically designed to prevent the execution of untrusted scripts in the browser?

   • ASameSite cookies
   • BHTTP Strict Transport Security (HSTS)
   • CCross-Origin Resource Sharing (CORS)
   • DContent Security Policy (CSP)
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is a key consideration when logging AJAX requests that include sensitive data?

   • ALog all data in plaintext for easier analysis
   • BDisable logging for authenticated users
   • CLog only the request headers, not the body
   • DAvoid logging sensitive data or ensure it is redacted
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A security analyst notices a sudden spike in AJAX requests to `/api/applyCoupon` from a single session, each with slightly different parameter values. The requests are returning 200 OK but the discount amounts vary. The analyst suspects an attacker is enumerating coupon codes. Which logging enhancement would BEST support detection and response?

   • ALog only failed authentication attempts to the endpoint.
   • BLog the full request URL, user ID, timestamp, and response status for every AJAX request.
   • CDisable logging for the `/api/applyCoupon` endpoint to reduce noise.
   • DIncrease the server's connection timeout to keep the session open longer.
   Reveal Solution Discussion Select an answer first