最新的GIAC Web Application Penetration Tester GWAPT - GWAPT免費考試真題

A. Nmap

B. OWASP ZAP

C. SonarQube

D. OpenVAS

A. Implementing two-factor authentication

B. Avoiding the use of CAPTCHA

C. Requiring strong password policies

D. Disabling all user accounts

A. A technique for updating parts of a webpage without refreshing the entire page

B. A tool for managing databases

C. A programming language used for web development

D. A protocol used for encrypting web communications

A. Implementing multi-factor authentication (MFA)

B. Encrypting all HTTP requests

C. Avoiding logging user actions

D. Enforcing unique passwords across accounts

A. Enabling directory listing

B. Setting cookies with the Secure flag

C. Regenerating session IDs after login

D. Allowing password reuse

A. Ignore the findings if there are no error messages

B. Enable caching to enhance performance

C. Manually validate each XSS finding

D. Decrypt the application's HTTPS traffic

A. Perform a brute-force attack to attempt logging in with common passwords

B. Test for cross-site scripting on the login page

C. Check for server uptime

D. Conduct SQL injection tests on the login form

A. Configuring strong authentication

B. URL fuzzing

C. Encrypting network traffic

D. Directory brute-forcing

A. SQL injection

B. Outdated software versions

C. Malware payloads

D. Missing security headers