Web Application Security Quiz

The HTTP methods that can lead to security issues in a web application

• OPTIONS

• PUT

• DELETE

• TRACE

Banner can get leaked by:

• Port scan

• Server side error

• HTTP header

• None of the above

Patching a vulnerable software may lead to:

• Misconfiguration of the software

• Securing of the software

• Degradation of the market value

• Lesser customers using the software

Which of the security misconfiguration this HTTP header is disclosing:

HTTP/1.1 200 OK

Date: Sat, 1 May 2010 21:10:40 EST

Server: Apache Tomcat 9.0.0.M1 (Unix) (Red Hat/Linux)

Last-Modified: Wed, 16 Mar 2010 11:20:14 PST

ETag: "1986-69b-123abc46"

Accept-Ranges: bytes

Content-Length: 1110

Connection: close

Content-Type: text/html

• Default password

• Logs

• Server Banner

• None of the above

To prevent security misconfigurations the developer should:

• Keep strong credentials

• Not expose server versions

• Whitelist domains/subdomains

• Disable insecure HTTP methods

PUT method can be used by an attacker:

• Download sensitive information from the application

• Upload files to the application

• Delete files from the application

• None of the above

Which of the following is an example of security misconfiguration?

• Using default credentials for an admin account

• Regularly updating software

• Implementing multi-factor authentication

• Encrypting sensitive data

What is the primary cause of security misconfiguration?

• Strong password policies

• Lack of proper security controls

• Regular security audits

• Use of secure coding practices