GIAC Certified Web Application Defender GWEB Prüfungsfragen mit Lösungen:
1. Which of the following techniques helps prevent malicious file uploads?
Response:
A) Storing uploaded files directly in the root directory
B) Using insecure direct object references (IDOR)
C) Allowing all file types to be uploaded
D) Validating the file type and size on the server side
2. What is the importance of automated security scanning in Continuous Integration/Continuous Deployment (CI/CD) pipelines?
Response:
A) It allows developers to deploy applications without manual review
B) It replaces the need for manual security testing
C) It identifies and helps remediate security vulnerabilities early in the development process
D) It ensures that the code is free from syntax errors
3. Which testing method is effective for identifying security issues in session management?
Response:
A) Usability testing to confirm that session management is user-friendly.
B) Load testing to ensure the application can handle many simultaneous sessions.
C) A/B testing different session timeout values to find the most user-friendly option.
D) Penetration testing focused on session management mechanisms.
4. Considering the advanced persistent threats (APTs), which of the following mechanisms is crucial for strengthening access control systems against such sophisticated attacks?
Response:
A) Implementing network segmentation and zero trust models
B) Ensuring physical security of all network devices
C) Deploying antivirus software on all endpoints
D) Using WEP encryption for wireless communications
5. What is the primary function of WSDL (Web Services Description Language)?
Response:
A) To describe the format and communication protocols used by a web service
B) To handle exceptions in web services
C) To monitor web service performance
D) To authenticate users accessing web services
Fragen und Antworten:
| 1. Frage Antwort: D | 2. Frage Antwort: C | 3. Frage Antwort: D | 4. Frage Antwort: A | 5. Frage Antwort: A |
903 Kundenbewertungen
