Free GIAC GWAPT Exam Dumps Questions & Answers

Which tool is commonly used as a web application proxy for penetration testing?

• A.  Burp Suite
• B.  Wireshark
• C.  Metasploit
• D.  Nmap

Which features improve session security in web applications? (Choose two)

• A.  Use of short session expiration times
• B.  Allowing session reuse across multiple devices
• C.  Hardcoding session tokens
• D.  Encryption of session data

What are typical signs of a successful brute-force attack? (Choose two)

• A.  Repeated login failures in the logs
• B.  Outdated SSL certificates
• C.  Unauthorized access to restricted resources
• D.  Increased CPU utilization

Which of the following are common methods to mitigate Cross-Site Scripting (XSS) vulnerabilities? (Choose two)

• A.  Encoding special characters
• B.  Encrypting data in transit
• C.  Disabling cookies
• D.  Input validation

What is credential stuffing?

• A.  Injecting SQL commands into login fields
• B.  Using stolen credentials from one breach to log into another system
• C.  Forcing a server reboot through unauthorized commands
• D.  Exploiting buffer overflow vulnerabilities