QUESTION NO: 1
Which of the following HTTP response header prevents the client from caching the HTTP response in the most secure manner?
Which of the following HTTP response header prevents the client from caching the HTTP response in the most secure manner?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
After purchasing an item on an e-commerce website, a user can view his order details by visiting the URL:
https://example.com/order_id=53870
A security researcher pointed out that by manipulating the order_id value in the URL, a user can view arbitrary orders and sensitive information associated with that order_id.
Which of the following is correct?
After purchasing an item on an e-commerce website, a user can view his order details by visiting the URL:
https://example.com/order_id=53870
A security researcher pointed out that by manipulating the order_id value in the URL, a user can view arbitrary orders and sensitive information associated with that order_id.
Which of the following is correct?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
In the context of the CORS (Cross-origin resource sharing) misconfiguration, which of the following statements is true?
In the context of the CORS (Cross-origin resource sharing) misconfiguration, which of the following statements is true?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 4
Which of the following is NOT a Server-Side attack?
Which of the following is NOT a Server-Side attack?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 5
Which of the following security attributes ensures that the browser only sends the cookie over a TLS (encrypted) channel?
Which of the following security attributes ensures that the browser only sends the cookie over a TLS (encrypted) channel?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 6
Which of the following SSL/TLS protocols are considered to be insecure?
Which of the following SSL/TLS protocols are considered to be insecure?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).