A company is preparing to deploy a web application to production. The operations team wants to ensure that the production environment is configured securely and consistently. Which practice is most important to implement before deployment?

Use the same configuration files in production as in development to ensure consistency

Set the server's timezone to UTC to simplify log analysis

Enable detailed error messages to help administrators troubleshoot issues

Disable directory listing and unnecessary HTTP methods on the web server

A web application uses a SQL database to store user profiles. The application constructs SQL queries by concatenating user input directly into the query string. A security assessment identifies a SQL injection vulnerability. Which mitigation is the most effective and should be implemented first?

Use a web application firewall (WAF) to block malicious requests

Disable error messages that reveal database details

Escape all user input with a generic escaping function

Use parameterized queries or prepared statements

GIAC Certified Web Application Defender

Domain 1Objective 2

Web Architecture and Configuration GWEB Practice Questions (Page 4)

Part of the Web Application Foundations domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 6–10 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

10concepts

Questions 16–20

16foundation · easy
Which component in a web application is responsible for managing the connection between the application code and the database?
Select an answer first
17foundation · easy
Which security practice is essential for preventing injection attacks by ensuring that user-supplied data is treated as data, not executable code?
Select an answer first
18application · medium
A company is preparing to deploy a web application to production. The operations team wants to ensure that the production environment is configured securely and consistently. Which practice is most important to implement before deployment?
Select an answer first
19foundation · easy
Which environment is characterized by frequent code changes, debugging tools, and often a local or shared server for developers?
Select an answer first
20application · medium
A web application uses a SQL database to store user profiles. The application constructs SQL queries by concatenating user input directly into the query string. A security assessment identifies a SQL injection vulnerability. Which mitigation is the most effective and should be implemented first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GWEB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GWEB” is a trademark of its owner, used for identification only.

Web Architecture and Configuration GWEB Practice Questions (Page 4)

Questions 16–20

Which component in a web application is responsible for managing the connection between the application code and the database?

Which security practice is essential for preventing injection attacks by ensuring that user-supplied data is treated as data, not executable code?

A company is preparing to deploy a web application to production. The operations team wants to ensure that the production environment is configured securely and consistently. Which practice is most important to implement before deployment?

Which environment is characterized by frequent code changes, debugging tools, and often a local or shared server for developers?

A web application uses a SQL database to store user profiles. The application constructs SQL queries by concatenating user input directly into the query string. A security assessment identifies a SQL injection vulnerability. Which mitigation is the most effective and should be implemented first?

Keep studying — Web Application Foundations