Web Pentest Quiz

Which attack allows an attacker to inject malicious JavaScript into a web page viewed by other users?

• Cross-Site Scripting (XSS)

• SQL Injection

• Command Injection

• Cross-Site Request Forgery (CSRF)

What is the main purpose of performing input validation in web applications?

• To improve user experience

• To optimize database performance

• To prevent security vulnerabilities such as SQL Injection

• To enhance server uptime

Which HTTP method is commonly used to submit form data to a web server?

• POST

• GET

• DELETE

• PUT

What is a potential consequence of an unrestricted file upload vulnerability?

• Increased server performance

• Prevention of data loss

• Remote code execution on the server

• Reduction in server storage space

What is a common defense mechanism against brute force attacks?

• Allowing password reuse

• Implementing account lockout policies after a number of failed login attempts

• Using only client-side encryption for passwords

• Disabling two-factor authentication (2FA)

What does OWASP stand for?

• Online Web Application Security Protocol

• Open Web Application System Program

• Open Worldwide Application Security Policy

• Open Web Application Security Project

Which of the following is a method to securely store passwords in web applications?

• Storing them in plaintext

• Hashing with a salt

• Using encryption without a key

• Storing them in the database as is

Which tool is commonly used for web application vulnerability scanning?

• Metasploit

• Burp Suite

• Nmap

• Wireshark

What does the term "least privilege" mean in web application security?

• Providing users with unlimited access during testing
  
  

• Giving users access only to the resources necessary to perform their tasks

• Granting users the highest level of access possible

• Removing all access controls for trusted users

What is a common way to prevent SQL Injection attacks?

• Input sanitization

• Captcha

• Cookies

• HTTPS