Web Application and HTTP Basics GWEB Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A web server returns a response with a status code of 404. The response also includes a body with an HTML error page. Which component of the HTTP response indicates that the requested resource was not found?

   • AHTTP version
   • BStatus line
   • CResponse body
   • DResponse headers
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst is reviewing HTTP traffic and notices that a response includes the header 'Strict-Transport-Security: max-age=31536000'. What is the purpose of this header?

   • AIt enables cross-origin resource sharing.
   • BIt sets a cookie for the session.
   • CIt forces the browser to use HTTPS for all future requests to the domain.
   • DIt prevents the browser from caching the response.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A web application needs to maintain user login state across multiple requests. The server sets a cookie after authentication. Which HTTP header is used by the server to send the cookie to the client?

   • ACookie
   • BAuthorization
   • CSet-Cookie
   • DCache-Control
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A user reports that when they visit a website, they see a message saying 'The page you are looking for is temporarily unavailable. Please try again later.' The response status code is 503. What does this status code indicate?

   • AThe server is currently unable to handle the request due to temporary overloading or maintenance.
   • BThe server encountered an unexpected condition that prevented it from fulfilling the request.
   • CThe client does not have permission to access the resource.
   • DThe requested resource has been permanently moved to a new URL.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A web application sets a cookie with the 'HttpOnly' attribute. What is the primary security benefit of this attribute?

   • AIt makes the cookie expire after the browser session ends.
   • BIt prevents the cookie from being sent over insecure HTTP connections.
   • CIt prevents client-side scripts from accessing the cookie.
   • DIt ensures the cookie is only sent to the originating server.
   Reveal Solution Discussion Select an answer first