Online Access Free GWAPT Exam Questions

Which tool is MOST commonly used during manual web application testing for GWAPT tasks?

• A.Burp Suite
• B.Wireshark
• C.Nmap
• D.Metasploit

While testing a web application with Burp Suite, you identify that a specific parameter might be vulnerable to SQL injection. What should you do next?

• A.Report the issue without further testing
• B.Modify unrelated parameters in the same request
• C.Block the server's IP to prevent exploitation
• D.Use SQLmap to automate the exploitation of the parameter

What is the role of fuzzing in web application security testing?

• A.To establish secure HTTPS connections
• B.To optimize database performance
• C.To encrypt application data
• D.To generate random inputs for identifying vulnerabilities

Which configurations can help enhance web application security? (Choose two)

• A.Disabling caching for all pages
• B.Setting file permissions to restrict access
• C.Restricting IP addresses that can access admin portals
• D.Enabling error message logging

What techniques can be used to gather information during reconnaissance? (Choose two)

• A.URL fuzzing
• B.Directory brute-forcing
• C.Encrypting network traffic
• D.Configuring strong authentication