GIAC Certified Web Application Defender
Domain 1Objective 1
Web Application and HTTP Basics GWEB Practice Questions (Page 2)
Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
9concepts
Questions 6–10
- 6
Which HTTP request header is used to specify the domain name of the server being requested, allowing a single server to host multiple websites?
Select an answer first - 7
A web application's login endpoint returns a 200 OK status code with a JSON body containing a session token. However, the application should return a 201 Created status code when a new session is created. Which HTTP status code class does 201 belong to?
Select an answer first - 8
Why do web applications use cookies and sessions in HTTP communication?
Select an answer first - 9
A user attempts to access a protected page and is redirected to a login page. After logging in, the user is sent back to the original page. Which HTTP status code is most likely responsible for the initial redirect to the login page?
Select an answer first - 10
A user logs into a web application and is issued a session ID stored in a cookie. On the next request, the browser automatically sends the cookie. Which part of the HTTP request carries the session ID?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.