An organization is deploying a web application that handles sensitive customer data. They need to ensure that data transmitted between the client and server is encrypted. Which of the following is the most appropriate measure?

Use HTTPS with a valid TLS certificate

Use HTTPS but with a self-signed certificate

Use HTTP with a custom header for encryption

Use HTTP and rely on the application to encrypt data

A user attempts to access a web page that requires authentication. The server responds with a 401 Unauthorized status code and a WWW-Authenticate header. What should the client do next?

Follow the redirect specified in the Location header.

Retry the request with the same credentials.

Provide valid credentials, typically by displaying a login prompt or using the WWW-Authenticate header to authenticate.

Clear the browser cache and reload the page.

A user submits a form on a web application, and the server responds with a 302 Found status code and a Location header pointing to /success. What will the browser do next?

Issue a new POST request to /success.

Display the response body of the 302 response.

Stay on the current page and do nothing.

Issue a new GET request to /success.

GIAC Certified Web Application Defender

Domain 1Objective 1

Web Application and HTTP Basics GWEB Practice Questions (Page 8)

Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

Questions 36–40

36application · medium
An organization is deploying a web application that handles sensitive customer data. They need to ensure that data transmitted between the client and server is encrypted. Which of the following is the most appropriate measure?
Select an answer first
37expert · medium
A user attempts to access a web page that requires authentication. The server responds with a 401 Unauthorized status code and a WWW-Authenticate header. What should the client do next?
Select an answer first
38foundation · easy
In an HTTP response status line `HTTP/1.1 404 Not Found`, what does the number `404` represent?
Select an answer first
39foundation · easy
Which component of a web application is typically responsible for storing persistent data such as user accounts and orders?
Select an answer first
40application · medium
A user submits a form on a web application, and the server responds with a 302 Found status code and a Location header pointing to /success. What will the browser do next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Web Application and HTTP Basics GWEB Practice Questions (Page 8)

Questions 36–40

An organization is deploying a web application that handles sensitive customer data. They need to ensure that data transmitted between the client and server is encrypted. Which of the following is the most appropriate measure?

A user attempts to access a web page that requires authentication. The server responds with a 401 Unauthorized status code and a WWW-Authenticate header. What should the client do next?

In an HTTP response status line `HTTP/1.1 404 Not Found`, what does the number `404` represent?

Which component of a web application is typically responsible for storing persistent data such as user accounts and orders?

A user submits a form on a web application, and the server responds with a 302 Found status code and a Location header pointing to /success. What will the browser do next?

Keep studying — Web Application Foundations