Free ISC CAP Exam Dumps Questions & Answers

In the screenshot below, an attacker is attempting to exploit which vulnerability?
POST /upload.php HTTP/1.1
Host: example.com
Cookie: session=xyz123;JSESSIONID=abc123
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) rv:107.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW Content-Length: 12345 Connection: keep-alive Content-Disposition: form-data; name="avatar"; filename="malicious.php" Content-Type: image/jpeg
<?php
phpinfo();
?>

• A.  HTTP Desync Attack
• B.  File Path Traversal Attack
• C.  Server-Side Request Forgery
• D.  File Upload Vulnerability

The payload {{7*7}} can be used for determining which of the following vulnerabilities?

• A.  Server Side Template Injection (SSTI)
• B.  Client-Side Template Injection (CSTI)
• C.  Both 1 and 2
• D.  None of the above

Which of the following is NOT a symmetric key encryption algorithm?

• A.  RC4
• B.  RSA
• C.  AES
• D.  DES

What is the full form of SAML?

• A.  Security Assertion Management Language
• B.  Security Authorization Markup Language
• C.  Security Assertion Markup Language
• D.  Secure Authentication Markup Language

In the context of the following JWT token, which of the following statement is true?
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.ey
JUYW1I1joiU2vjbB3ZiNo_mn0vNWT4G1-
ATqOTmo7rm70VI12WCdkMI_S1_bPg_G8

• A.  mn0vNWT4G1-ATqOTmo7rm70VI12WCdkMI_S1_bPg_G8 represents a JWT Signature.
• B.  eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 represents a JWT Signature.
• C.  eyJUYW1I1joiU2vjbB3ZiNo represents a JWT Signature.
• D.  None of the above.