CPSA Crest 3

Question 1

What is the primary defense against Cross-Site Request Forgery (CSRF) attacks in web applications?

Accepted Answer

Synchronizer token pattern using unpredictable CSRF tokens

Answer

Anti-CSRF tokens are unique, unpredictable values tied to user sessions that must be submitted with each state-changing request, preventing forged requests.

Question 2

Which HTTP response header instructs browsers to prevent MIME-type sniffing, reducing XSS risk from uploaded files?

Accepted Answer

X-Content-Type-Options

Answer

X-Content-Type-Options: nosniff prevents browsers from interpreting files as a different MIME type than declared, mitigating attacks via content-type confusion.

Question 3

During a web application test, you find that changing the order ID in a URL reveals another user's order. What vulnerability is this?

Accepted Answer

Insecure Direct Object Reference (IDOR)

Answer

IDOR occurs when an application uses user-controlled input to access objects directly without verifying the requesting user's authorization.

Question 4

What does a Blind SQL injection vulnerability differ from a classic SQL injection in terms of exploitation?

Accepted Answer

Blind SQLi does not return query results directly; data is inferred from application behavior

Answer

In blind SQL injection, the attacker cannot see query output directly and must infer information from differences in application responses or timing.

Question 5

Which encoding technique is most effective at preventing reflected XSS when inserting user input into HTML content?

Accepted Answer

HTML entity encoding

Answer

HTML entity encoding converts characters like <, >, and & into their HTML entities, preventing browsers from interpreting injected content as executable markup.

CPSA Exam Practice Test

CPSA Exam Practice Test

CPSA Crest 3