GWAPT Exam Questions

Which mechanisms can help prevent brute-force attacks on login pages? (Choose two)

Which techniques help mitigate XSS vulnerabilities? (Choose two)

During reconnaissance, you discover that the web application's /admin directory is exposed. What would you do next?

Which configurations are essential for secure session cookies? (Choose two)

During a configuration audit, you find that directory listing is enabled. What is the associated risk?

During a penetration test, you find that a web application does not implement account lockout policies. What is your next step?

What is the primary purpose of HTTP in web applications?

Which of the following SQL clauses is most often exploited in SQL injection attacks?

What are the primary components of a web application? (Choose two)

Which HTTP method is used to retrieve data from a server?

What actions can mitigate the risk of authentication bypass vulnerabilities? (Choose two)

What actions help secure session management? (Choose two)

What are common indicators of a CSRF attack? (Choose two)

What is the primary goal of configuration testing in web applications?

Which type of XSS attack involves injecting malicious code that gets stored on the server and executed on subsequent page loads?

What is a SQL injection attack?

You have identified that a web server discloses its software version in HTTP headers. What is the next logical step?

During an assessment, you discover that a web application does not compress large files before sending them to the client. What is the best recommendation to improve performance?

Which type of Cross-Site Scripting (XSS) attack occurs when malicious input is stored on the target server?

What does HTTPS provide that HTTP does not?

What techniques can be used to gather information during reconnaissance? (Choose two)

Which types of vulnerabilities can Nikto detect? (Choose two)

What advantages does AJAX provide in web applications? (Choose two)

What are key benefits of disabling unnecessary services in a web application? (Choose two)

Which HTTP response codes indicate successful requests? (Choose two)

Which types of SQL injection attacks exist? (Choose two)

What is credential stuffing?

Which tool is commonly used for mapping the structure of a web application?

What are effective methods to protect against Cross-Site Request Forgery (CSRF) attacks? (Choose two)

A web application you are testing uses HTTP instead of HTTPS for login pages. What should you recommend?

Which tools are effective for finding XSS vulnerabilities? (Choose two)

While spidering a web application, you notice an endpoint /debug/logs. How should you proceed?

Which tool is commonly used for automating brute-force attacks on web applications?

Which testing methods are supported by fuzzing tools? (Choose two)

Which of the following tools is commonly used to identify misconfigurations in web applications?

During reconnaissance, which HTTP response code indicates that the requested resource is not found?

Which tools are effective for discovering XSS vulnerabilities? (Choose two)

Which of the following is a common indicator of a credential stuffing attack?

What mechanism is commonly used to protect session IDs during transmission?

Which header is commonly used to prevent Cross-Site Request Forgery attacks?

Which HTTP header helps prevent browsers from loading a page in a frame to mitigate clickjacking attacks?

What information can be gathered using the WHOIS lookup service?

Which methods are commonly used to detect XSS vulnerabilities? (Choose two)

Which tools are commonly used for web application security testing? (Choose two)

Which of the following ensures session IDs are unique for each user?

A web application allows SQL injection attacks on its admin panel. What should you recommend to mitigate this issue?

Which actions help secure configuration settings in web applications? (Choose two)

Which vulnerability occurs when user input is returned in an HTTP response without proper encoding?

Which HTTP header is MOST effective at mitigating clickjacking attacks?

What is the primary goal of a Cross-Site Request Forgery (CSRF) attack?