AAI Training

What is the primary function of a web application firewall (WAF)?

• Encrypting data transmitted between the client and server.

• Filtering and monitoring HTTP traffic between a web application and the Internet.

• Storing user session data securely.

• Managing database queries efficiently.

Which of the following is NOT a component of the client-server architecture?

• Database server

• Web browser

• Application server

• File system

What does OWASP stand for?

• Open-source Web Application Security Platform

• Online Web Application Security Protocol

• Organization of Web Application Security Professionals

  
  

• Open Web Application Security Project

What is the purpose of the Burp Suite Intruder tool?

• Intercepting and modifying HTTP requests and responses.

• Automating attacks by varying parameters and payloads.

• Scanning for vulnerabilities in web applications.

• Analyzing the structure of web pages.

Which OWASP Top 10 vulnerability refers to the failure to properly restrict what authenticated users are allowed to do?

• Broken Authentication

• Broken Access Control

• Injection

• Security Misconfiguration

Which OWASP Top 10 vulnerability involves executing unauthorized code or commands via a vulnerable application?

• Injection

• Security Misconfiguration

• Broken Authentication

• Broken Access Control

Which Burp Suite tool is used to analyze the randomness and predictability of tokens?

• Intruder

• Repeater

• Sequencer

• Decoder

What is the main purpose of the Burp Suite Decoder tool?

• Decoding encoded data such as Base64 or URL encoding.

• Analyzing the randomness and predictability of tokens.

• Intercepting and modifying HTTP requests and responses.

• Comparing two pieces of data to identify differences.

What is the purpose of input validation in web applications?

• To restrict access to certain features based on user roles.

• To ensure all user input fields are mandatory.

  
  

• To encrypt sensitive data transmitted over the network.

• To prevent users from entering invalid data that could lead to security vulnerabilities.

Which of the following are examples of security misconfigurations in web applications? (More than 1 correct answers)

• Failing to encrypt sensitive data in transit.

• Allowing directory listing on the web server.

• Using default credentials for database connections.

• Storing passwords in plaintext format.