Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
GIAC (SANS) logo

GIAC Certified Web Application Defender

Domain 1Objective 1

Web Application and HTTP Basics GWEB Practice Questions (Page 5)

Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here
10free pages
9concepts

Questions 21–25

  1. 21application · medium

    A web application exposes a REST API for managing user profiles. The front-end needs to update a user's email address. The developer sends a request with the new email in the request body. Which HTTP method should be used to correctly indicate that this request is an update to an existing resource?

    Select an answer first
  2. 22expert · medium

    A web application is deployed behind a load balancer that terminates TLS. The application server receives HTTP traffic from the load balancer. The security team wants to ensure that the application knows whether the original client request was made over HTTPS. Which HTTP header should the load balancer set to convey this information?

    Select an answer first
  3. 23application · medium

    A web application is experiencing issues where the browser is caching an old version of a JavaScript file, causing functionality errors. The developer wants to ensure that the browser always fetches the latest version of the file. Which HTTP response header should the developer configure on the server?

    Select an answer first
  4. 24application · medium

    A web server responds to a client request with the following status line: HTTP/1.1 200 OK. What does this status line indicate about the request?

    Select an answer first
  5. 25application · medium

    A developer is debugging an issue where a client sends a request to update a resource, but the server responds with a 405 Method Not Allowed. Which part of the HTTP request is most likely causing this response?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.