PenTest+ Web Application Security Testing 3

Question 1

Which HTTP security header specifically prevents a web page from being embedded in an iframe to mitigate clickjacking attacks?

Accepted Answer

X-Frame-Options

Answer

Content-Security-Policy

Answer

Strict-Transport-Security

Answer

X-Content-Type-Options

Question 2

During a pentest, you find that the `Set-Cookie` header is missing the `HttpOnly` flag. What attack does this enable?

Accepted Answer

Cookie theft via JavaScript (XSS)

Answer

Session Fixation

Answer

Cross-Site Request Forgery

Answer

Clickjacking

Question 3

A web application uses OAuth 2.0 and does not validate the `state` parameter during the authorization callback. What attack is possible?

Accepted Answer

Cross-Site Request Forgery on OAuth Flow

Answer

Token Replay Attack

Answer

JWT Algorithm Confusion

Answer

Authorization Code Interception

Question 4

A JWT token uses `alg: none` and is accepted by the server without signature verification. What is this vulnerability called?

Accepted Answer

Algorithm Confusion (None Algorithm)

Answer

Weak Secret Attack

Answer

Token Replay

Answer

Insecure Deserialization

Question 5

An application server sends the header `Access-Control-Allow-Origin: *` with `Access-Control-Allow-Credentials: true`. Why is this a security risk?

Accepted Answer

It allows any origin to make credentialed cross-origin requests, exposing authenticated data

Answer

It enables SQL injection from cross-origin requests

Answer

It disables TLS for cross-origin connections

Answer

It prevents the browser from enforcing the same-origin policy entirely

Question 6

Which tool is commonly used to perform automated web application vulnerability scanning during a CompTIA PenTest+ engagement?

Accepted Answer

Nikto

Answer

Metasploit Framework

Answer

Hashcat

Answer

Responder

Question 7

A tester discovers that a web application renders user input inside a Jinja2 template. Submitting `{{7*7}}` returns `49`. What vulnerability is present?

Accepted Answer

Server-Side Template Injection (SSTI)

Answer

Cross-Site Scripting (XSS)

Answer

Remote Code Execution via SQL

Answer

XML Injection