GWAPT 試験問題を無料オンラインアクセス

Which methods help prevent session fixation attacks? (Choose two)

• A.Enabling directory listing
• B.Allowing password reuse
• C.Regenerating session IDs after login
• D.Setting cookies with the Secure flag

A web application allows SQL injection attacks on its admin panel. What should you recommend to mitigate this issue?

• A.Increase session timeout durations
• B.Restrict admin access to trusted IPs only
• C.Use HTTP instead of HTTPS for the admin panel
• D.Hardcode admin passwords

What is credential stuffing?

• A.Forcing a server reboot through unauthorized commands
• B.Exploiting buffer overflow vulnerabilities
• C.Using stolen credentials from one breach to log into another system
• D.Injecting SQL commands into login fields

Which method is most effective in preventing SQL injection attacks?

• A.Disabling SQL logging
• B.Encrypting the database
• C.Using parameterized queries or prepared statements
• D.Hiding database error messages

What is the primary goal of a SQL injection attack?

• A.To bypass authentication mechanisms and access sensitive data
• B.To inject malicious scripts into a web page
• C.To encrypt database records
• D.To manipulate URL parameters