Security Testing GWEB Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A threat modeling session for a new web application identifies that the application will store credit card numbers and will be accessible from the internet. The team uses the STRIDE methodology. Which threat should be prioritized as the most likely to cause financial and reputational damage?

   • AElevation of privilege for a low-privileged user
   • BDenial of service against the web server
   • CInformation disclosure of the credit card database
   • DSpoofing of the application's login page
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester is assessing a web application that uses a REST API. The tester has already enumerated the API endpoints and identified that the /api/users endpoint returns user details when given an ID. The tester wants to test for broken object level authorization (BOLA). Which action is most appropriate?

   • ARun a vulnerability scanner that checks for known CVEs in the API framework.
   • BSend a large payload to the API to test for input validation issues.
   • CInspect the API response headers for security misconfigurations.
   • DChange the ID parameter to another user's ID and observe whether the response returns that user's data.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security analyst is using an automated scanner to assess a web application. The scanner reports a cross-site scripting (XSS) vulnerability in a comment field. The analyst wants to confirm the vulnerability is exploitable. Which action is most appropriate?

   • AManually craft a proof-of-concept payload and test it in a browser to see if script execution occurs.
   • BRun the scanner again with a higher intensity setting.
   • CAsk the developer if the field is properly sanitized.
   • DAccept the scanner result and add it to the report as a confirmed vulnerability.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   When documenting a vulnerability in a security test report, which information is most important to include?

   • AA clear description, evidence, and remediation steps
   • BThe IP address of the tester's machine
   • CThe name of the tester who found it
   • DThe exact time the test started
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security tester is assessing a web application that uses a custom authentication mechanism. The vulnerability scanner reported no issues, but the tester suspects a logic flaw in the password reset flow. Which action is most appropriate to validate this suspicion?

   • ARe-run the vulnerability scanner with a more aggressive scan profile to force additional checks.
   • BReview the application's error logs for any failed password reset attempts.
   • CManually analyze the password reset workflow, attempting to manipulate parameters such as tokens and user identifiers.
   • DReplace the custom authentication with a standard library and re-test.
   Reveal Solution Discussion Select an answer first