GWEB 試験問題を無料オンラインアクセス

Which type of security testing focuses on identifying security vulnerabilities in the application's source code?
Response:

• A.Static Application Security Testing (SAST)
• B.Load testing
• C.Dynamic Application Security Testing (DAST)
• D.Functional testing

Which leading-edge web technologies may introduce new security challenges for developers?
(Choose two)
Response:

• A.WebSockets
• B.WebAssembly
• C.JSON web tokens
• D.TLS 1.3

When securing a web service, why is it important to have a robust XML parsing mechanism?
Response:

• A.To ensure that XML documents are compliant with W3C standards
• B.To prevent XML External Entity (XXE) attacks
• C.To facilitate seamless integration with AJAX-based clients
• D.To improve the parsing speed and efficiency of XML documents

Which access control mechanism assigns privileges based on a user's role in the organization?
Response:

• A.Mandatory Access Control (MAC)
• B.Discretionary Access Control (DAC)
• C.Role-Based Access Control (RBAC)
• D.Time-Based Access Control (TBAC)

HTTP Response Splitting can be mitigated by:
Response:

• A.Allowing redirection to trusted URLs only
• B.Applying file size limits on uploads
• C.Ensuring user input does not directly influence HTTP headers
• D.Enabling HTTPS across the site