Security Testing GWEB Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following best describes the scope of security testing for a web application?

   • AOnly the network and server infrastructure hosting the application
   • BThe application, its supporting infrastructure, and the data it processes
   • COnly the application's source code and business logic
   • DOnly the user interface and client-side code
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A penetration tester is assessing a web application that uses a content delivery network (CDN) in front of the origin server. The tester needs to test for vulnerabilities that are specific to the origin server, but the CDN is caching responses and masking the origin. The rules of engagement allow testing the origin server. Which technique is most effective?

   • AScan the CDN's IP address range for open ports and services.
   • BUse a technique such as DNS history or certificate transparency logs to discover the origin IP, then test that IP directly.
   • CSend requests with a 'Cache-Control: no-cache' header to force the CDN to fetch fresh content.
   • DPerform all testing through the CDN and assume the origin has the same vulnerabilities.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst runs an authenticated vulnerability scan against a web application and receives a report that flags a SQL injection in a search parameter. The analyst manually verifies the finding by injecting a benign payload that returns an extra row in the response. What should the analyst do NEXT?

   • AImmediately patch the search parameter and then re-scan to confirm the fix.
   • BRemove the finding from the report because automated scanner results are not reliable without a full exploit.
   • CRe-run the scan with a more aggressive payload set to determine the full impact of the injection.
   • DAdd the finding to the final report as a confirmed vulnerability with evidence and a remediation recommendation.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A threat modeling session for a web application identifies that an attacker could tamper with the price of an item during checkout. The team needs to prioritize which threats to address first. Which factor should be the primary consideration for prioritization?

   • AThe ease of implementing a fix.
   • BThe personal preference of the development team.
   • CThe number of lines of code affected by the threat.
   • DThe likelihood of the threat being exploited and the potential business impact.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security analyst is reviewing the results of a vulnerability scan. The scan reports a high number of 'informational' findings, but the analyst is concerned about a single 'medium' finding that appears to be a false positive. The team has limited time. What is the most efficient approach?

   • AReport all findings as-is without verification to save time.
   • BIgnore the informational findings and only focus on the medium finding.
   • CManually verify the medium finding first, then triage the informational findings based on potential impact.
   • DRe-run the scan with a different tool to confirm the medium finding.
   Reveal Solution Discussion Select an answer first