GIAC Web Application Penetration Tester GWAPT GWAPT Prüfungsfragen mit Lösungen:
1. While spidering a web application, you notice an endpoint /debug/logs. How should you proceed?
A) Report the finding and conclude testing
B) Exploit cross-origin resource sharing
C) Conduct a SQL injection test
D) Attempt to access the endpoint to gather debug information
2. Which technique is commonly used to identify active services running on a web server?
A) Brute-forcing login credentials
B) Port scanning
C) Creating phishing emails
D) Exploiting stored XSS vulnerabilities
3. Which encoding method should be used to safely display user input in HTML content?
A) Base64 encoding
B) URL encoding
C) Hex encoding
D) HTML entity encoding
4. What are typical signs of a successful brute-force attack? (Choose two)
A) Increased CPU utilization
B) Repeated login failures in the logs
C) Outdated SSL certificates
D) Unauthorized access to restricted resources
5. What common configuration errors can expose sensitive data? (Choose two)
A) Enabling the SameSite attribute for cookies
B) Implementing secure authentication mechanisms
C) Using outdated SSL/TLS protocols
D) Storing sensitive data in plaintext
Fragen und Antworten:
| 1. Frage Antwort: D | 2. Frage Antwort: B | 3. Frage Antwort: D | 4. Frage Antwort: B,D | 5. Frage Antwort: C,D |
1346 Kundenbewertungen
