GIAC Certification GIAC Web Application Penetration Tester

Question 1

Which GIAC certification focuses on assessing and exploiting vulnerabilities in web applications?

Accepted Answer

GWAPT

Answer

GPEN

Answer

GWEB

Answer

GCIH

Question 2

Which HTTP header injection attack can lead to session hijacking by injecting malicious scripts into a victim's browser?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

SQL Injection

Answer

XML External Entity (XXE)

Answer

Server-Side Template Injection

Question 3

What type of SQL injection attack retrieves data from the database based on a true/false question without directly returning data?

Accepted Answer

Blind Boolean-based SQLi

Answer

Error-based SQLi

Answer

Union-based SQLi

Answer

Time-based SQLi

Question 4

Which Burp Suite feature automatically tests web application parameters for common vulnerabilities like XSS and SQL injection?

Accepted Answer

Scanner

Answer

Proxy

Answer

Repeater

Answer

Intruder

Question 5

What vulnerability occurs when an application includes a remote file specified in a user-controllable parameter?

Accepted Answer

Remote File Inclusion

Answer

Local File Inclusion

Answer

Path Traversal

Answer

SSRF

Question 6

Which OWASP Top 10 category covers failures in authentication mechanisms that allow attackers to compromise passwords or session tokens?

Accepted Answer

Identification and Authentication Failures

Answer

Injection

Answer

Broken Access Control

Answer

Security Misconfiguration