Testing Identification, Authentication and Authorization CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the main advantage of using Attribute-Based Access Control (ABAC) over Role-Based Access Control (RBAC)?

   • AABAC is the only model that supports least privilege
   • BABAC allows access decisions based on dynamic attributes such as time or location
   • CABAC is simpler to implement than RBAC
   • DABAC does not require user authentication
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a common vulnerability in identification processes that a security tester should look for?

   • AThe system does not log failed logins
   • BThe system allows duplicate usernames
   • CThe system does not lock out accounts after failed attempts
   • DUsers can choose weak passwords
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which test would verify that an authentication mechanism is resistant to brute-force attacks?

   • AChecking if passwords are transmitted in plaintext
   • BSubmitting many incorrect passwords to see if the account locks
   • CVerifying that session tokens are random
   • DAttempting to access a resource without logging in
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security tester is assessing a web application that uses a 'remember me' feature. The application sets a persistent cookie that contains the user's username and a hash of the password. The tester notices that the cookie is not encrypted and is stored in the user's browser. Which of the following is the MOST significant risk associated with this design?

   • AAn attacker can modify the cookie to change the username and impersonate another user.
   • BAn attacker who steals the cookie can impersonate the user without knowing the password.
   • CAn attacker can brute-force the password hash in the cookie.
   • DAn attacker can perform a cross-site scripting (XSS) attack to steal the cookie.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security tester is assessing a web application that allows users to upload profile pictures. The application generates a unique filename for each upload, such as 'user_1234_5678.jpg'. The tester notices that the filename is displayed in the HTML page and is used in the image URL. The tester tries to access another user's image by guessing the filename. The tester successfully retrieves user_1235_5678.jpg, which belongs to another user. Which of the following is the MOST effective control to prevent this unauthorized access?

   • AUse HTTPS to encrypt the traffic between the client and server.
   • BImplement a random, unguessable filename for each upload.
   • CStore the images outside the web root and serve them through a script that checks authorization.
   • DAdd a Content Security Policy (CSP) header to prevent hotlinking.
   Reveal Solution Discussion Select an answer first