Free ISC CAP Exam Dumps Questions & Answers

In the context of the CORS (Cross-origin resource sharing) misconfiguration, which of the following statements is true?

• A.CORS is exploitable if the value of the HTTP headers are Access-Control-Allow-Origin: * and Access- Control-Allow-Credentials: true
• B.All of the above
• C.CORS is exploitable if the value of the HTTP headers are Access-Control-Allow-Origin: * and Access- Control-Allow-Credentials: false
• D.CORS is exploitable if the value of the HTTP headers is Access-Control-Allow-Origin: * and the value of the Access-Control-Allow-Credentials header is irrelevant

Which is the most effective way of input validation to prevent Cross-Site Scripting attacks?

• A.Blacklisting HTML and other harmful characters
• B.Using a Web Application Firewall (WAF)
• C.Whitelisting and allowing only trusted input
• D.Marking Cookie as HttpOnly

Which of the following HTTP response header prevents the client from caching the HTTP response in the most secure manner?

• A.Cache-Control: no-cache, no-store
• B.Secure-Cache: Enabled
• C.Content-Security-Policy: no-cache, no-store
• D.Cache-Control: Private

The DNS entries forwww.ironman.comandwww.hulk.comboth point to the same IP address i.e., 1.3.3.7. How does the web server know which web application is being requested by the end user's browser?

• A.The web server inspects the client's SSL certificate.
• B.The web server inspects the cookies sent by the client.
• C.The web server inspects the HTTP "Host" header sent by the client.
• D.The web server uses a reverse DNS lookup of the client's IP address.

While performing a security audit of a web application, you discovered an exposed docker-compose.yml file.
What is the significance of this file and what data can be found in it?

• A.The docker-compose.yml file is a YAML file that contains the configuration of load balancers and firewalls.
• B.The docker-compose.yml file is a YAML file that contains the application source code.
• C.The docker-compose.yml file is a YAML file that contains the server logs and user session information including but not limited to admin users.
• D.The docker-compose.yml file is a YAML file that is used to define the services, networks, and volumes required for a Docker application. It specifies the configuration and dependencies for all containers in the application, including their network settings and container volumes.