Skip to content

Introduction to the Web & HTTP Protocol

🚩 CTFs & Labs 🧪¶

Web Application Penetration Testing CTF 1

❔ Quizzes¶

Introduction to Web Application Security¶

Question	Answer
Which of the following is responsible for interpreting and rendering HTML/CSS to display web pages?	Web Browser
What is the primary purpose of JavaScript in web development?	To enable interactivity and dynamic content on web pages

Web Application Security Testing¶

Question	Answer
Which type of security testing involves testing an application with the intent of not just finding vulnerabilities but also exploiting them to assess potential impact?	Penetration Testing
What is the primary objective of web application security testing?	To identify and mitigate security vulnerabilities in the application

Common Web Application Threats & Risks¶

Question	Answer
What type of web application threat targets the application's database by exploiting improper handling of user-supplied input?	SQLi
What type of web application threat aims to overload the application or server by flooding it with an excessive number of requests?	DoS
A Threat in Cybersecurity is an intentional or accidental event that can lead to exploitation or compromise of a system.	True

Web Application Architecture¶

Question	Answer
What is the purpose of the back-end in a web application architecture?	To store and manage the application's data and business logic

Web Application Technologies - Part 2¶

Question	Answer
What is the primary purpose of CSS (Cascading Style Sheets) in web development?	To control the presentation and styling of web pages

Introduction to HTTP¶

Question	Answer
Which version of HTTP introduced support for persistent connections, reducing the overhead of establishing a new connection for each request?	HTTP/1.1

HTTP Requests - Part 2¶

Question	Answer
In an HTTP request, which part specifies the resource being requested from the server?	Request URL
When using the HTTP "POST" method, where does the data get included in the request?	Request Body
Which HTTP method is used by web browsers to request a resource from a web server?	GET
What is the default port used by HTTP for communication?	80

HTTP Responses¶

Question	Answer
Which HTTP response header informs the browser how long it should cache the response?	Cache-Control
In HTTP response parsing, what does the "Content-Type" header specify?	Type of data in the response body
What is the purpose of the "Set-Cookie" header in an HTTP response?	It contains the data that the browser needs to send back to the server with future requests.

HTTP Basics Lab - Part 2¶

Question	Answer
What does the "Referer" header in an HTTP request typically contain?	The URL of the previous web page from which the request originated

HTTPS¶

Question	Answer
What port is typically used for HTTPS communication?	443
How does HTTPS ensure secure data transmission?	By using SSL/TLS encryption to protect data during transmission