When security testing a web application that uses WebSockets, what is a key testing consideration?

Disabling JavaScript in the browser to test the WebSocket endpoint directly

Intercepting and modifying WebSocket frames to test for injection and authorization flaws

Using standard HTTP fuzzing tools without modification because WebSockets are just HTTP

Only testing the initial HTTP handshake because WebSocket messages are encrypted

GIAC Certified Web Application Defender

Domain 5Objective 3

Leading Edge Technologies and Web Security GWEB Practice Questions (Page 7)

Part of the Security Testing and Cryptography domain, which makes up ~20% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 5–8 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

3concepts

Questions 31–31

31foundation · easy
When security testing a web application that uses WebSockets, what is a key testing consideration?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Leading Edge Technologies and Web Security GWEB Practice Questions (Page 7)

Questions 31–31

When security testing a web application that uses WebSockets, what is a key testing consideration?

Keep studying — Security Testing and Cryptography