Free GIAC GWAPT Exam Dumps Questions & Answers

A web application uses AJAX for dynamic content updates but has no fallback for older browsers.
What is the best course of action?

• A.Use plain text responses instead of JSON
• B.Provide fallback mechanisms for non-AJAX-supported browsers
• C.Redirect users with older browsers to a different site
• D.Disable AJAX functionality entirely

Which tools are commonly used for web application security testing? (Choose two)

• A.SQLmap
• B.WinRAR
• C.Burp Suite
• D.VLC Media Player

Which HTTP header is MOST effective at mitigating clickjacking attacks?

• A.X-Frame-Options
• B.Strict-Transport-Security
• C.Set-Cookie
• D.Content-Type

What is the purpose of spidering during reconnaissance?

• A.To identify encryption methods
• B.To map all linked pages of a web application
• C.To generate network traffic logs
• D.To inject SQL payloads

While testing a web application with Burp Suite, you identify that a specific parameter might be vulnerable to SQL injection. What should you do next?

• A.Modify unrelated parameters in the same request
• B.Report the issue without further testing
• C.Block the server's IP to prevent exploitation
• D.Use SQLmap to automate the exploitation of the parameter