[2025] GWEB by Cloud Security Actual Free Exam Practice Test
Free Cloud Security GWEB Exam Question
NEW QUESTION # 64
What best practice should be followed when developing secure RESTful APIs?
Response:
- A. Restricting access with proper authentication and authorization
- B. Implementing stateful session management
- C. Utilizing API keys transmitted over HTTP headers
- D. Avoiding the use of standard HTTP methods
Answer: A
NEW QUESTION # 65
Which HTTP header can be used as a mitigation against CSRF attacks when set correctly?
Response:
- A. Content-Security-Policy
- B. X-Frame-Options
- C. Access-Control-Allow-Origin
- D. Referrer-Policy
Answer: D
NEW QUESTION # 66
How should a web application securely handle the regeneration of session IDs?
Response:
- A. By regenerating the session ID at regular intervals without user interaction.
- B. By regenerating a new session ID upon user authentication and invalidating the old one.
- C. By keeping the same session ID but changing associated permissions upon login.
- D. By broadcasting the new session ID to all active users to ensure synchronization.
Answer: B
NEW QUESTION # 67
In Java-based web applications, how can developers minimize security risks associated with serialization?
Response:
- A. By serializing all data to JSON format
- B. By avoiding the serialization of sensitive information
- C. By always using the latest version of Java
- D. By using only transient variables
Answer: B
NEW QUESTION # 68
What is the primary function of two-factor authentication (2FA)?
Response:
- A. To block all failed login attempts
- B. To improve application speed
- C. To limit the number of login attempts
- D. To provide an additional layer of security by requiring two forms of identity verification
Answer: D
NEW QUESTION # 69
Which of the following are recommended practices for securing user authentication in web applications?
(Choose two)
Response:
- A. Storing passwords in plaintext
- B. Using hardcoded credentials in the codebase
- C. Using multi-factor authentication (MFA)
- D. Implementing password complexity requirements
Answer: C,D
NEW QUESTION # 70
Why is it important to secure the communication channel during the authentication process?
Response:
- A. To ensure faster data transfer
- B. To prevent unauthorized disclosure of credentials
- C. To reduce the load on authentication servers
- D. To allow for easier integration with third-party services
Answer: B
NEW QUESTION # 71
When securing an AJAX application, which of the following practices should be implemented to protect against common attacks?
(Choose Two)
Response:
- A. Disabling client-side scripting
- B. Validating and sanitizing all input on the server-side
- C. Implementing Content Security Policy (CSP)
- D. Using GET requests for sensitive transactions
Answer: B,C
NEW QUESTION # 72
Which of the following techniques helps prevent malicious file uploads?
Response:
- A. Allowing all file types to be uploaded
- B. Using insecure direct object references (IDOR)
- C. Validating the file type and size on the server side
- D. Storing uploaded files directly in the root directory
Answer: C
NEW QUESTION # 73
HTTP Response Splitting can be mitigated by:
Response:
- A. Ensuring user input does not directly influence HTTP headers
- B. Allowing redirection to trusted URLs only
- C. Applying file size limits on uploads
- D. Enabling HTTPS across the site
Answer: A
NEW QUESTION # 74
Which approach is recommended for detecting potential cross-origin attacks in web applications?
Response:
- A. Monitoring and analyzing cross-origin traffic
- B. Implementing less restrictive CORS policies for easier access
- C. Allowing credentials in CORS requests by default
- D. Disabling cookies entirely
Answer: A
NEW QUESTION # 75
Which vulnerability allows an attacker to bypass the Same-Origin Policy and access restricted resources?
Response:
- A. SQL injection
- B. Cross-Origin Resource Sharing (CORS) misconfiguration
- C. Brute force attacks
- D. Directory traversal
Answer: B
NEW QUESTION # 76
What is the primary goal of implementing anti-automation controls in a web application?
Response:
- A. To allow unrestricted access to all site resources
- B. To increase the application's response time
- C. To enhance the user experience by reducing server load
- D. To prevent bulk data extraction from the site
Answer: D
NEW QUESTION # 77
Which of the following protocols is commonly used for implementing Single Sign-On (SSO) in web applications?
Response:
- A. TLS
- B. OAuth 2.0
- C. SSL
- D. TCP/IP
Answer: B
NEW QUESTION # 78
What is the main advantage of using a hash function for storing passwords over encryption?
Response:
- A. It allows for easy retrieval of the original password
- B. It provides a way to verify the integrity of the password without revealing it
- C. It requires less computational power
- D. It ensures that the output is of variable length
Answer: B
NEW QUESTION # 79
......
GIAC GWEB Actual Questions and Braindumps: https://www.exams4collection.com/GWEB-latest-braindumps.html
