eJPT Web Application Penetration Testing 2

Question 1

During a web application test, you discover a parameter that reflects user input directly in the HTML response without encoding. Which vulnerability is MOST likely present?

Accepted Answer

Reflected XSS

Answer

When user input is reflected back in the HTML response without sanitization or encoding, it indicates a Reflected Cross-Site Scripting (XSS) vulnerability.

Question 2

What does the HTTP response header 'X-Frame-Options: DENY' protect against?

Accepted Answer

Clickjacking attacks

Answer

X-Frame-Options: DENY prevents the page from being embedded in an iframe, protecting against clickjacking attacks.

Question 3

An attacker crafts a URL like: http://example.com/page?id=1 UNION SELECT username,password FROM users--. What attack is this?

Accepted Answer

Union-based SQL Injection

Answer

A UNION SELECT statement appended to a query is the hallmark of Union-based SQL Injection, used to retrieve data from other tables.

Question 4

Which Burp Suite tool is best for automatically testing all parameters in a web request for common vulnerabilities?

Accepted Answer

Burp Scanner

Answer

Burp Scanner automatically crawls and audits web applications for a wide range of vulnerabilities across all parameters.

Question 5

What is the primary purpose of the 'robots.txt' file in web application reconnaissance?

Accepted Answer

It can reveal hidden directories and sensitive paths that the admin wants to hide from search engines

Answer

robots.txt lists directories the site owner wants search engines to ignore, which often inadvertently reveals sensitive or hidden paths to attackers.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Web Application Penetration Testing 2