GIAC Certified Web Application Defender 認定 GWEB 試験問題:

1. What are common threats to web services security, and how can they be mitigated?
(Choose two)
Response:

A) Buffer overflows, mitigated by reducing the number of web service endpoints
B) Cross-Site Scripting (XSS), mitigated by input validation
C) SQL injection, mitigated by allowing direct database access
D) XML External Entity (XXE) attacks, mitigated by disabling external entity processing

2. Which encryption algorithm is recommended for securing sensitive data at rest?
Response:

A) SHA-1
B) RC4
C) AES
D) DES

3. When securing a web service, why is it important to have a robust XML parsing mechanism?
Response:

A) To improve the parsing speed and efficiency of XML documents
B) To facilitate seamless integration with AJAX-based clients
C) To prevent XML External Entity (XXE) attacks
D) To ensure that XML documents are compliant with W3C standards

4. An organization is assessing its access control systems to mitigate potential attacks. Which of the following are effective strategies to prevent unauthorized access?
(Choose Two)
Response:

A) Implementing least privilege principles
B) Implementing open access policies to reduce complexity
C) Using single-factor authentication for all access points
D) Regularly reviewing and updating access controls

5. What is a key security concern when using WebAssembly in web applications?
Response:

A) It does not support encryption for data in transit
B) It allows execution of untrusted code directly in the browser
C) It bypasses the Same-Origin Policy
D) It increases network latency

質問と回答：