Web Application Security Quiz

Web Spiders have the potential to deface a web site.

• True

• False

Which of the following can be used as methods of identifying technologies used by a web application?

• SESSION TOKENS

• DIRECTORY NAMES

Which of the following is not a tool for web app enumeration? WEBSPLOIT is a tool

• True

• False

Which of the following is a good tool for enumerating directories?

Web applications doesn't focus on instances of vulnerabilities.

• True

• False

Dynamic web content will often provide different functions using the same URL.

• True

• False

Developers may leave certain content such as back up copies and default 3rd party code safely on the web server as long as it is not part of the live content in a web application.

• True

• False

Spiders map out web applications by doing which of the following?

Automated spiders are the best choice for web applications that create URLs randomly.

• True

• False

Which of the following Burp Intruder options is used for testing functionality that is not displayed?