GIAC Web Application Penetration Tester GWAPT - GWAPT Exam Practice Test

A. PHP

B. Python

C. HTML

D. CSS

A. Nmap

B. Wireshark

C. Metasploit

D. Burp Suite

A. Increase session timeout duration

B. Encrypt all HTTP traffic

C. Implement hashed and salted storage for passwords

D. Disable user authentication

A. Enabling strict cookie policies

B. Using anti-CSRF tokens

C. Increasing server capacity

D. Implementing CAPTCHA challenges

A. Secure

B. Path

C. SameSite

D. Domain

A. Nikto

B. Wireshark

C. OWASP ZAP

D. Burp Suite

A. In the server's application logs

B. On the server-side database

C. As part of the network traffic analysis

D. Within the victim's browser via an HTTP response

A. Flooding the server with HTTP requests

B. Running additional port scans to identify vulnerabilities

C. Disabling all authentication mechanisms

D. Disabling verbose error messages and replacing them with generic ones

A. Allowing direct access to database admin accounts

B. Displaying detailed database error messages to users

C. Using database users with minimal privileges

D. Proper error handling

A. A list of accessible URLs and endpoints

B. A report of missing patches

C. A database schema

D. A flowchart of application functionality