Cross Origin Policy Attacks and Mitigation GWEB Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A developer is configuring CORS for an API that supports both authenticated and anonymous requests. The API uses cookies for authentication. The developer sets Access-Control-Allow-Origin: * and Access-Control-Allow-Credentials: true. Which statement accurately describes the result?

   • AThe API will only allow requests from the origin that matches the cookie's domain.
   • BThe browser will allow any origin to read responses, including with cookies.
   • CThe API will allow all origins but only for anonymous requests.
   • DThe browser will block the request because the wildcard origin is not allowed with credentials.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the effect of setting the SameSite attribute to 'Strict' on a session cookie?

   • AThe cookie is not sent with any cross-site requests, including top-level navigations.
   • BThe cookie is only sent with same-site requests and top-level navigations, but not with subresource requests.
   • CThe cookie is only sent over HTTPS connections.
   • DThe cookie is blocked from being set by third-party scripts.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a common technique used by attackers to abuse CORS policies?

   • AUsing a proxy server to modify the Access-Control-Allow-Origin response header.
   • BExploiting a server-side template injection to change the CORS configuration.
   • CUsing a null origin header to bypass allowlists that do not explicitly block it.
   • DSending requests with a forged Referer header to trick the server into thinking the request is same-origin.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is migrating a web application to a new domain. The old domain (https://old.example.com) must redirect to the new domain (https://new.example.com). The application uses cookies for authentication and has CSRF protection. What is the most important consideration to avoid CSRF vulnerabilities during the migration?

   • AUse a 302 redirect instead of a 301 redirect.
   • BSet Access-Control-Allow-Origin to * on the new domain.
   • CDisable SameSite cookies on the new domain.
   • DEnsure the old domain does not set cookies that are scoped to the parent domain.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company operates a web application that uses cookies for authentication and a separate API that is used by the application. The API is configured with a permissive CORS policy that reflects any Origin and allows credentials. The company wants to reduce the risk of cross-origin data theft while maintaining the application's functionality. Which combination of changes is most appropriate?

   • ARestrict the API's CORS policy to the application's origin and add SameSite=Lax to the session cookie.
   • BRemove CORS headers from the API and use a reverse proxy to add them dynamically.
   • CKeep the CORS policy as is and add anti-CSRF tokens to the application.
   • DSet the session cookie to SameSite=None and use a wildcard CORS policy.
   Reveal Solution Discussion Select an answer first