最新のGWEB問題集で試験を準備する

GIAC GWEB 試験概要:

GIAC GWEB 試験シラバストピック:

GIAC Certified Web Application Defender 認定 GWEB 試験問題：

問題 #1

Which of the following is a primary security concern associated with the adoption of microservices architecture in web applications?
Response:

A. Easier to maintain security patches
B. Increased attack surface due to the multiple endpoints
C. Reduced complexity of the system
D. Consolidated logging mechanism

問題 #2

Which HTTP header can be used as a mitigation against CSRF attacks when set correctly?
Response:

A. Content-Security-Policy
B. X-Frame-Options
C. Referrer-Policy
D. Access-Control-Allow-Origin

問題 #3

Which of the following is an effective method for preventing CSRF attacks, which often exploit cross-origin vulnerabilities?
Response:

A. Verifying the origin with standard headers
B. Using the same token for different users
C. Allowing auto-redirection to external URLs
D. Enabling directory listing

問題 #4

To enhance the security of web applications against cross-origin attacks, which measures should be taken?
(Choose Three)
Response:

A. Regularly updating the Access-Control-Allow-Origin header
B. Isolating sensitive content using iframe sandboxing
C. Allowing all scripts to execute from any source
D. Implementing robust session management
E. Enforcing strict input validation

問題 #5

Which of the following input validation techniques helps prevent SQL injection attacks?
(Choose two)
Response:

A. Allowing direct user input in SQL queries
B. Using prepared statements with parameterized queries
C. Escaping user input before using it in queries
D. Implementing strict input validation on all fields

解説：