Certified Ethical Hacker Web Application Security 5

Question 1

A JWT signed with the 'none' algorithm is dangerous because:

Accepted Answer

It can be forged with no valid signature

Answer

Accepting alg:none lets attackers craft tokens without a verifiable signature.

Question 2

Which testing approach examines a running application without source code access?

Accepted Answer

DAST

Answer

Dynamic Application Security Testing (DAST) probes the live app from the outside.

Question 3

Mass assignment vulnerabilities occur when an application:

Accepted Answer

Binds user input directly to internal object properties

Answer

Auto-binding request parameters to model fields can let attackers set privileged attributes.

Question 4

Which response best limits the impact of a successful credential-stuffing attack?

Accepted Answer

Multi-factor authentication

Answer

MFA requires an additional factor, blocking access even when passwords are reused or stolen.

Question 5

An open redirect vulnerability is commonly abused to:

Accepted Answer

Send users to malicious sites while appearing trusted

Answer

Open redirects forward users to attacker-controlled URLs, aiding phishing.

Certified Ethical Hacker Practice Test