A web application uses cookies to maintain session state. After a security review, the team wants to reduce the risk of session fixation attacks. Which configuration change is most effective?

Store the session ID in a hidden form field instead of a cookie.

Use a longer random session ID.

Regenerate the session ID after a user successfully authenticates.

Set the cookie's HttpOnly attribute to prevent JavaScript access.

A web application uses JavaScript to validate a form on the client side before submission. The security team is concerned that this validation can be bypassed. What additional measure should be implemented to ensure data integrity?

Disable the form's submit button until JavaScript validation passes.

Add a CAPTCHA to the form to prevent automated submissions.

Use HTTPS to encrypt the form data in transit.

Re-validate all input on the server side before processing.

What is the primary function of a server-side framework like Django or Ruby on Rails?

To manage database connections only

To execute JavaScript in the browser

To provide a structured environment for building and organizing server-side application code

GIAC Certified Web Application Defender

Domain 1Objective 2

Web Architecture and Configuration GWEB Practice Questions (Page 1)

Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

10concepts

Questions 1–5

1application · medium
A web application uses cookies to maintain session state. After a security review, the team wants to reduce the risk of session fixation attacks. Which configuration change is most effective?
Select an answer first
2application · medium
A web application uses JavaScript to validate a form on the client side before submission. The security team is concerned that this validation can be bypassed. What additional measure should be implemented to ensure data integrity?
Select an answer first
3foundation · easy
Which component is primarily responsible for executing dynamic application code, such as Java servlets or .NET business logic, and returning the generated result to the web server?
Select an answer first
4foundation · easy
Which client-side technology is used to define the structure and content of a web page?
Select an answer first
5foundation · easy
What is the primary function of a server-side framework like Django or Ruby on Rails?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Web Architecture and Configuration GWEB Practice Questions (Page 1)

Questions 1–5

A web application uses cookies to maintain session state. After a security review, the team wants to reduce the risk of session fixation attacks. Which configuration change is most effective?

A web application uses JavaScript to validate a form on the client side before submission. The security team is concerned that this validation can be bypassed. What additional measure should be implemented to ensure data integrity?

Which component is primarily responsible for executing dynamic application code, such as Java servlets or .NET business logic, and returning the generated result to the web server?

Which client-side technology is used to define the structure and content of a web page?

What is the primary function of a server-side framework like Django or Ruby on Rails?

Keep studying — Web Application Foundations