GIAC Certified Web Application Defender - GWEB FREE EXAM DUMPS QUESTIONS & ANSWERS

A. To improve application speed B. To provide an additional layer of security by requiring two forms of identity verification C. To block all failed login attempts D. To limit the number of login attempts

A. To encrypt data transmissions between the user's browser and the web server. B. To store data on the client's computer to facilitate persistent, stateful information between page requests. C. To serve targeted advertisements to users based on their browsing history. D. To increase the computational performance of the server by offloading processing to the client.

A. Enabling HTTPS across the site B. Applying file size limits on uploads C. Allowing redirection to trusted URLs only D. Ensuring user input does not directly influence HTTP headers

A. To identify vulnerabilities that could be exploited by attackers. B. To ensure the application is scalable and can handle growth in traffic. C. To enhance the user interface for better customer satisfaction. D. To verify that the website is operational 24/7 without downtime.

A. Limiting the session timeout B. Using Secure and HttpOnly flags for session cookies C. Storing session tokens in cookies without encryption D. Allowing unlimited session duration

A. Browser Content Security Policy (CSP) B. File Transfer Protocol (FTP) security C. Virtual Private Network (VPN) D. Secure/Multipurpose Internet Mail Extensions (S/MIME)

A. Time-Based Access Control (TBAC) B. Mandatory Access Control (MAC) C. Role-Based Access Control (RBAC) D. Discretionary Access Control (DAC)

A. To act as an intermediary for requests from clients seeking resources from servers. B. To encrypt outgoing server responses. C. To provide additional compute resources to a server. D. To distribute load among several servers.

A. By always using the latest version of Java B. By using only transient variables C. By avoiding the serialization of sensitive information D. By serializing all data to JSON format

A. Fixing corrupted session data to ensure the continuity of user interaction. B. A method where the attacker fixes the user's session ID before the user logs in, thereby hijacking the user's session. C. A condition where a user's session remains active indefinitely without timeout. D. A scenario where session IDs are securely fixed to user accounts to prevent theft.

A. To authenticate both the client and the server during the handshake process B. To provide non-repudiation of message exchange C. To distribute symmetric keys securely D. To ensure that only the intended client can decrypt the server's messages

A. Enforcing strict input validation B. Isolating sensitive content using iframe sandboxing C. Regularly updating the Access-Control-Allow-Origin header D. Allowing all scripts to execute from any source E. Implementing robust session management