GCIH Web Application Security & Attacks 2

Question 1

What is a Local File Inclusion (LFI) vulnerability, and what risk does it pose to a web server?

Accepted Answer

It allows attackers to include and read files from the server's local filesystem through a web parameter

Answer

It allows remote malicious files to execute on the server via include functions

Answer

It enables attackers to modify local configuration files via a web interface

Answer

It permits inclusion of external stylesheet files that bypass CSP

Question 2

An attacker appends '../../../etc/passwd' to a URL parameter in a web request. What attack type is being attempted?

Accepted Answer

Directory Traversal

Answer

SQL Injection

Answer

Command Injection

Answer

XML Injection

Question 3

What type of attack captures a valid authenticated session token and reuses it to impersonate the legitimate user without needing their credentials?

Accepted Answer

Session hijacking

Answer

Credential stuffing

Answer

Session fixation

Answer

Brute force authentication

Question 4

An XML-based web service parses user-supplied XML that references external entities. What vulnerability does this create?

Accepted Answer

XML External Entity (XXE) Injection

Answer

XML Schema Injection

Answer

SOAP Action Spoofing

Answer

Schema Poisoning

Question 5

Which technique do attackers commonly use to bypass blacklist-based input validation filters that block known malicious strings?

Accepted Answer

Obfuscation and encoding such as URL encoding or double encoding

Answer

Protocol-level tunneling

Answer

Certificate pinning bypass

Answer

SQL dialect switching

Question 6

During incident analysis, a responder finds the web application has no protection against form resubmission from external sites. Which control would directly mitigate this?

Accepted Answer

Adding anti-CSRF tokens to all state-changing requests

Answer

Implementing HTTPS with HSTS

Answer

Enabling HTTP-only and Secure flags on session cookies

Answer

Deploying a Content Security Policy header

Question 7

What is the primary purpose of a Web Application Firewall (WAF) as a defensive control in incident response and prevention?

Accepted Answer

To filter, monitor, and block malicious HTTP/HTTPS traffic at the application layer

Answer

To encrypt all web traffic between client and server using TLS

Answer

To eliminate the need for secure coding practices in web development

Answer

To prevent volumetric DDoS attacks at the network layer