WAPT 1 - OWASP TOP 10

What is the primary function of a web server?

• To design the user interface

• To handle database queries

• To serve web pages and process HTTP requests

• To manage client devices

Answer explanation

The primary function of a web server is to serve web pages and process HTTP requests, not to design the user interface, handle database queries, or manage client devices.

Which component of a website handles user interactions and visual presentation?

• Back-End

• Web Server

• Database

• Front-End

Answer explanation

The Front-End component of a website handles user interactions and visual presentation, making it the correct choice for this question.

Which of the following is an example of a back-end language?

• HTML

• CSS

• JavaScript

• PHP

Answer explanation

The correct choice for a back-end language is PHP. HTML, CSS, and JavaScript are front-end languages used for designing the user interface.

What does a client do in the context of a website?

• Processes HTTP requests

• Stores data

• Requests and uses resources from a server

• Manages encryption

Answer explanation

In the context of a website, a client requests and uses resources from a server. This includes loading web pages, images, videos, and other content from the server to display on the client's device.

Which attack involves inserting malicious code into a web application?

• Broken Access Control

• Injection

• Security Misconfiguration

• Cryptography Failure

Answer explanation

The correct attack involving inserting malicious code into a web application is Injection.

Which of the following is a common cause of Cryptography Failure?

• SQL Injection

• Weak Encryption Algorithm

• Poor Authentication Design

• Default Credentials

Answer explanation

Weak Encryption Algorithm is a common cause of Cryptography Failure as it can be exploited by attackers to decrypt sensitive information. SQL Injection, Poor Authentication Design, and Default Credentials are not directly related to Cryptography Failure.

What is the term for improper use of user permissions, allowing unauthorized actions?

• Security Misconfiguration

• Broken Access Control

• Injection

• SSRF

Answer explanation

Broken Access Control is the term for improper use of user permissions, allowing unauthorized actions.

Which component is most directly associated with data storage and management?

• Front-End

• Back-End

• Web Server

• Database

Answer explanation

The component most directly associated with data storage and management is the Database.

What is an example of a front-end technology?

• PHP

• MySQL

• HTML

• Nginx

Answer explanation

HTML is an example of a front-end technology as it is used to create the structure and content of web pages that users interact with directly.

What is a common example of a Security Misconfiguration?

• Weak Encryption Algorithm

• Lack of Logging for suspicious activities

• Exposed debug information or default credentials

• Poor Password Policies

Answer explanation

A common example of a Security Misconfiguration is exposed debug information or default credentials, which can lead to unauthorized access and compromise of sensitive data.