Online Access Free CAP Practice Test

In the context of the Race Condition vulnerability, which of the following statements is true?

• A.A situation that occurs when a single thread predictably accesses two resources.
• B.A situation that occurs when two threads access the same resource at the same time.
• C.A situation that occurs when a single thread unpredictably accesses two resources.
• D.A situation that occurs when two threads access different resources at the same time.

In the context of the following JWT token, which of the following statements is true?
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.ey
JUYW1I1joiU2vjbB3ZiNo_mn0vNWT4G1-
ATqOTmo7rm70VI12WCdkMI_S1_bPg_G8

• A.None of the above.
• B.Both A and B are correct.
• C.The highlighted segment of the token represents a JWT Header.
• D.The highlighted segment of the token represents a JWT Payload.

In the screenshot below, an attacker is attempting to exploit which vulnerability?
POST /upload.php HTTP/1.1
Host: example.com
Cookie: session=xyz123;JSESSIONID=abc123
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) rv:107.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW Content-Length: 12345 Connection: keep-alive Content-Disposition: form-data; name="avatar"; filename="malicious.php" Content-Type: image/jpeg
<?php
phpinfo();
?>

• A.File Path Traversal Attack
• B.HTTP Desync Attack
• C.Server-Side Request Forgery
• D.File Upload Vulnerability

Multifactor authentication will NOT be able to prevent:

• A.Cross-Site Scripting Vulnerability
• B.Cross-Site Request Forgery Vulnerability
• C.All of the above
• D.Path Traversal Vulnerability

Which of the following is NOT an asymmetric key encryption algorithm?

• A.DSA
• B.AES
• C.Diffie-Hellman
• D.RSA