GCIH Web Application Security & Attacks

Question 1

Which SQL injection technique allows an attacker to infer database information by observing differences in application responses without visible error messages?

Accepted Answer

Boolean-based blind injection

Answer

Error-based injection

Answer

Time-based blind injection

Answer

Union-based injection

Question 2

Which HTTP security header is most effective at mitigating cross-site scripting (XSS) attacks by controlling which content sources the browser may load?

Accepted Answer

Content-Security-Policy

Answer

X-Frame-Options

Answer

Strict-Transport-Security

Answer

X-Content-Type-Options

Question 3

An attacker exploits a web application by injecting malicious scripts that execute in other users' browsers when they visit an affected page. What attack type is this?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

SQL Injection

Answer

Cross-Site Request Forgery (CSRF)

Answer

Command Injection

Question 4

Which type of XSS permanently stores the malicious payload in the application's database so every user who views the page is affected?

Accepted Answer

Stored (Persistent) XSS

Answer

Reflected XSS

Answer

DOM-based XSS

Answer

Universal XSS

Question 5

What does a Cross-Site Request Forgery (CSRF) attack exploit to force authenticated users into performing unintended actions?

Accepted Answer

The trust a site has in the user's browser session

Answer

Weak password hashing algorithms on the server

Answer

Misconfigured CORS headers exposing API endpoints

Answer

Cleartext transmission of authentication tokens

Question 6

An incident handler discovers a PHP file in a web server's upload directory that accepts OS commands via GET parameters. What has most likely occurred?

Accepted Answer

Web shell installation

Answer

SQL injection leading to file write

Answer

Directory traversal exploit

Answer

XML External Entity (XXE) attack

Question 7

Which OWASP Top 10 category covers vulnerabilities where untrusted data is sent to an interpreter as part of a command or query, such as SQL, OS, or LDAP injection?

Accepted Answer

Injection

Answer

Broken Access Control

Answer

Security Misconfiguration

Answer

Insecure Design