CAP 試験問題を無料オンラインアクセス

After purchasing an item on an e-commerce website, a user can view his order details by visiting the URL:
https://example.com/order_id=53870
A security researcher pointed out that by manipulating the order_id value in the URL, a user can view arbitrary orders and sensitive information associated with that order_id.
Which of the following is correct?

• A.The root cause of the problem is a weak authorization (Session Management) and by validating a user's privileges, the issue can be fixed
• B.The root cause of the problem is a lack of input validation and by implementing a strong whitelisting, the problem can be solved
• C.None of the above
• D.The problem can be solved by implementing a Web Application Firewall (WAF)

An application's forget password functionality is described below:
The user enters their email address and receives a message on the web page:
"If the email exists, we will email you a link to reset the password"
The user also receives an email saying:
"Please use the link below to create a new password:"
http://example.com/reset_password?userId=5298
Which of the following is true?

• A.Both A and C
• B.The reset link uses an insecure channel
• C.The application will allow the user to reset an arbitrary user's password
• D.The application is vulnerable to username enumeration

Based on the below-mentioned code snippet, the 'filename' variable is vulnerable to which of the following attacks?
import os
filename = input("Enter the file name:")
path = "/var/www/html/files/" + filename
content = ""
with open(path, 'r') as file:
content = file.read()
print("File content:\n", content)

• A.Remote Code Execution
• B.Path Traversal
• C.Both A and B
• D.None of the above

Based on the screenshot below, which of the following statements is true?
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 359987
Cache-Control: max-age=604800
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Dec 2022 18:33:05 GMT
Expires: Fri, 09 Dec 2022 18:33:05 GMT
Last-Modified: Mon, 28 Nov 2022 14:33:18 GMT
Server: Microsoft-IIS/8.0
X-AspNet-Version: 2.0.50727
Vary: Accept-Encoding
X-Powered-By: ASP.NET
Content-Length: 1256

• A.The application is using an outdated server technology
• B.The application is disclosing the server version
• C.The application is disclosing the version of the framework used
• D.All of the above

Observe the HTTP request below and identify the vulnerability attempted.
GET /help.php?file=../../../etc/passwd HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 Cookie: JSESSIONID=38RB5ECV10785B53AF29816E92E2E50 Te: trailers Connection: keep-alive

• A.Cross-Site Request Forgery Vulnerability
• B.Code Injection Vulnerability
• C.Path Traversal Vulnerability
• D.All of the above