GIAC Web Application Penetration Tester GWAPT - GWAPT FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following is a common indicator of a SQL injection vulnerability?

A. Error messages displaying database information B. A missing Content-Security-Policy header C. Slow application response times D. Directory listing enabled

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which of the following tools is specifically designed for testing SQL injection vulnerabilities?

A. SQLmap B. Hydra C. John the Ripper D. Nikto

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which techniques help mitigate XSS vulnerabilities? (Choose two)

A. Output encoding B. Avoiding use of HTML C. Input validation D. Enabling FTP

Discussion 0

Correct Answer: A,C Vote an answer

Question 4

During a penetration test, you find that a web application does not implement account lockout policies. What is your next step?

A. Test for cross-site scripting on the login page B. Check for server uptime C. Conduct SQL injection tests on the login form D. Perform a brute-force attack to attempt logging in with common passwords

Discussion 0

Correct Answer: D Vote an answer

Question 5

What is the primary purpose of session management in web applications?

A. To encrypt all transmitted data B. To maintain user state and track interactions with the application C. To ensure that only administrators can access the application D. To optimize application performance

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which testing methods are supported by fuzzing tools? (Choose two)

A. Input randomization B. Validating secure encryption algorithms C. Brute force attacks D. Identifying buffer overflow vulnerabilities

Discussion 0

Correct Answer: A,D Vote an answer