312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 16 of 42, with answer review and explanations.

Question 76

A Java app uses Random() for session tokens. What is the risk?

  1. Session fixation
  2. XSS
  3. Predictable tokens
  4. CSRF

Question 77

A Java app uses outdated libraries with known CVEs. What risk does this create?

  1. CSRF
  2. DoS
  3. Supply chain risk
  4. XSS

Question 78

A web app does not limit API request rate in code. What attack is enabled?

  1. XSS
  2. Data scraping
  3. SQLi
  4. CSRF

Question 79

A Java app allows file download via user-controlled path. What attack is possible?

  1. SQLi
  2. Path traversal
  3. XSS
  4. CSRF

Question 80

An attacker accesses a server using reused NTLM hashes without cracking passwords. What attack is this?

  1. Brute force
  2. Replay
  3. Kerberoasting
  4. Pass-the-hash