Ethical Hacking Web Application Security

Question 1

Which OWASP Top 10 vulnerability occurs when untrusted data is sent to an interpreter as part of a command?

Accepted Answer

Injection

Answer

Injection vulnerabilities (SQL, OS, LDAP) occur when untrusted input is sent to an interpreter, potentially allowing attackers to execute unintended commands.

Question 2

What does XSS stand for in web application security?

Accepted Answer

Cross-Site Scripting

Answer

Cross-Site Scripting (XSS) is a vulnerability where attackers inject malicious scripts into web pages viewed by other users, stealing sessions or redirecting victims.

Question 3

Which Burp Suite feature is used to intercept and modify HTTP requests between a browser and web server?

Accepted Answer

Proxy

Answer

Burp Suite's Proxy module intercepts HTTP/HTTPS traffic between the browser and the server, allowing testers to inspect and modify requests in real time.

Question 4

What is a CSRF attack?

Accepted Answer

Forging requests from an authenticated user's browser

Answer

Cross-Site Request Forgery (CSRF) tricks an authenticated user's browser into sending unauthorized requests to a trusted site, performing actions without the user's knowledge.

Question 5

Which HTTP response header helps prevent XSS attacks by restricting which content can be loaded on a page?

Accepted Answer

Content-Security-Policy

Answer

Content-Security-Policy (CSP) headers restrict the sources from which scripts, styles, and other resources can be loaded, significantly reducing XSS attack surface.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Web Application Security