How does HTTP facilitate communication in the client-server model?

By encrypting all data automatically

By providing a direct database connection to the client

By defining a request-response protocol between clients and servers

By establishing a persistent connection that keeps the server stateful

A user logs into a banking application. The server sets a session cookie with the Secure and HttpOnly flags. Later, the user navigates to a different page on the same site. Which statement accurately describes how the session is maintained across these requests?

The server stores the session ID in a hidden form field on every page, and the client submits it with each POST request.

The server re-authenticates the user on every request by requiring the password to be sent in the Authorization header.

The client automatically includes the session cookie in the request headers, and the server matches it to the stored session data.

The session data is stored entirely in the cookie, and the server does not keep any session state.

A web server returns a status code in the 3xx range. What does this class of status codes indicate?

The client must take additional action to complete the request, often a redirect

The server encountered an error

GIAC Certified Web Application Defender

Domain 1Objective 1

Web Application and HTTP Basics GWEB Practice Questions (Page 4)

Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

Questions 16–20

16foundation · easy
How does HTTP facilitate communication in the client-server model?
Select an answer first
17application · medium
A user logs into a banking application. The server sets a session cookie with the Secure and HttpOnly flags. Later, the user navigates to a different page on the same site. Which statement accurately describes how the session is maintained across these requests?
Select an answer first
18foundation · easy
A web server returns a status code in the 3xx range. What does this class of status codes indicate?
Select an answer first
19application · medium
A web application is experiencing slow response times. The architecture includes a load balancer, multiple application servers, and a shared database. Which component is most likely to become a bottleneck under high traffic?
Select an answer first
20foundation · easy
Which HTTP method is intended to retrieve a representation of a resource without causing any side effects on the server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Web Application and HTTP Basics GWEB Practice Questions (Page 4)

Questions 16–20

How does HTTP facilitate communication in the client-server model?

A user logs into a banking application. The server sets a session cookie with the Secure and HttpOnly flags. Later, the user navigates to a different page on the same site. Which statement accurately describes how the session is maintained across these requests?

A web server returns a status code in the 3xx range. What does this class of status codes indicate?

A web application is experiencing slow response times. The architecture includes a load balancer, multiple application servers, and a shared database. Which component is most likely to become a bottleneck under high traffic?

Which HTTP method is intended to retrieve a representation of a resource without causing any side effects on the server?

Keep studying — Web Application Foundations