GCIH Web Application Security & Attacks 3

Question 1

Which OWASP Top 10 2021 category, ranked #1, covers failures that allow authenticated users to access data or perform actions beyond their intended permissions?

Accepted Answer

Broken Access Control

Answer

Broken Access Control (#1 in OWASP Top 10 2021) covers failures to enforce restrictions on what authenticated users are allowed to do, enabling unauthorized access to data or functionality.

Question 2

An API endpoint returns complete JSON objects containing sensitive fields not displayed in the UI, relying on the client to filter what is shown. What OWASP API vulnerability does this represent?

Accepted Answer

Excessive Data Exposure

Answer

Excessive Data Exposure occurs when APIs return more data than necessary and trust clients to filter it, inadvertently exposing sensitive fields to any party intercepting or inspecting the response.

Question 3

What is Burp Suite primarily used for during web application penetration testing and incident investigation?

Accepted Answer

Intercepting, inspecting, and modifying HTTP/HTTPS requests and responses

Answer

Burp Suite functions as an intercepting proxy that sits between the browser and web server, allowing security testers to capture, analyze, modify, and replay HTTP/HTTPS traffic.

Question 4

An attacker submits a registration form with an extra field 'role=admin' that the application automatically binds to the user model and saves to the database. What vulnerability is this?

Accepted Answer

Mass Assignment (Parameter Tampering)

Answer

Mass assignment occurs when a framework automatically maps all user-supplied HTTP parameters to internal object properties without whitelisting, allowing attackers to set fields they should never control.

Question 5

During a web application audit, a tester finds that sensitive state-changing operations are implemented as GET requests with parameters in the URL. What is the primary security risk?

Accepted Answer

GET requests are logged in server logs and browser history and are vulnerable to CSRF via img tags

Answer

State-changing GET requests are logged in access logs and browser history, leak via the Referer header, and can be triggered via CSRF using simple HTML tags like `<img src=...>` without user interaction.

(GCIH) GIAC Experienced Incident Handler Practice Test

(GCIH) GIAC Experienced Incident Handler Practice Test

GCIH Web Application Security & Attacks 3