GWEB試験無料問題集（187題）「GIAC Certified Web Application Defender 認定」

出題：1

Which of the following practices should be implemented to secure web server architecture?
(Choose two)
Response:

A. Disabling unused services and ports

B. Using default configurations for web servers

C. Allowing unrestricted access to all network segments

D. Regularly applying security patches and updates

正解：A,D 解答を投票する

出題：2

What best practice should be applied when developing test strategies for web authentication?
Response:

A. Testing with real user credentials in all environments

B. Limiting testing scope to avoid discovering too many issues

C. Conducting thorough penetration testing on authentication endpoints

D. Ignoring SSL/TLS because it is the responsibility of the infrastructure team

正解：C 解答を投票する

出題：3

What are best practices for securing access control in web applications?
(Choose two)
Response:

A. Allowing shared accounts for efficiency

B. Assigning admin privileges to all users

C. Using RBAC to control user permissions

D. Regularly reviewing and updating user access

正解：C,D 解答を投票する

出題：4

Which of the following is a primary security concern associated with the adoption of microservices architecture in web applications?
Response:

A. Increased attack surface due to the multiple endpoints

B. Easier to maintain security patches

C. Reduced complexity of the system

D. Consolidated logging mechanism

正解：A 解答を投票する

出題：5

In the context of session security, what is session fixation?
Response:

A. A scenario where session IDs are securely fixed to user accounts to prevent theft.

B. A condition where a user's session remains active indefinitely without timeout.

C. A method where the attacker fixes the user's session ID before the user logs in, thereby hijacking the user's session.

D. Fixing corrupted session data to ensure the continuity of user interaction.

正解：C 解答を投票する

出題：6

What is the major vulnerability associated with using weak passwords in web applications?
Response:

A. Decreased storage space

B. Longer page load times

C. Increased risk of brute force attacks

D. Improved user experience

正解：C 解答を投票する

出題：7

When dealing with serialization, which two of the following are crucial security considerations?
(Choose Two)
Response:

A. Ensuring that data is serialized in a compact format

B. Avoiding the exposure of sensitive data during the serialization process

C. Validating serialized objects before deserializing them

D. Using only native serialization formats for security

正解：B,C 解答を投票する

出題：8

Which of the following techniques can be used by an attacker to circumvent the same-origin policy?
(Choose Two)
Response:

A. Cross-site scripting (XSS)

B. SQL injection

C. Cross-site request forgery (CSRF)

D. Phishing

正解：A,C 解答を投票する

出題：9

An organization is assessing its access control systems to mitigate potential attacks. Which of the following are effective strategies to prevent unauthorized access?
(Choose Two)
Response:

A. Implementing open access policies to reduce complexity

B. Implementing least privilege principles

C. Using single-factor authentication for all access points

D. Regularly reviewing and updating access controls

正解：B,D 解答を投票する

出題：10

What is the primary function of WSDL (Web Services Description Language)?
Response:

A. To monitor web service performance

B. To handle exceptions in web services

C. To authenticate users accessing web services

D. To describe the format and communication protocols used by a web service

正解：D 解答を投票する

出題：11

In the context of web security, which two of the following options are considered leading-edge technologies?
(Choose Two)
Response:

A. Cross-Origin Resource Sharing (CORS)

B. Secure Sockets Layer (SSL)

C. Content Security Policy (CSP)

D. Frame Options Header

正解：A,C 解答を投票する

出題：12

In a typical three-tier web application architecture, the _______ tier is responsible for processing business logic, performing computations, and making decisions.
Response:

A. Data

B. Client

C. Presentation

D. Business Logic

正解：D 解答を投票する

出題：13

When implementing encryption in a web application, which of the following practices should be followed?
(Choose Two)
Response:

A. Use proven cryptographic libraries instead of creating your own

B. Regularly rotate encryption keys

C. Store encryption keys in the same database as the encrypted data

D. Use a new key for every encryption operation

正解：A,D 解答を投票する

出題：14

What is the primary role of a reverse proxy in a web application architecture?
Response:

A. To act as an intermediary for requests from clients seeking resources from servers.

B. To distribute load among several servers.

C. To provide additional compute resources to a server.

D. To encrypt outgoing server responses.

正解：A 解答を投票する

GWEB試験無料問題集「GIAC Certified Web Application Defender 認定」