20+ practice questions focused on Network and Web Application Attacks — one of the most tested topics on the Certified Ethical Hacker CEH exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Network and Web Application Attacks PracticeA security analyst is configuring a web application firewall (WAF) to protect against SQL injection. Which HTTP parameter location should the analyst focus on to block malicious SQL queries?
Explanation: SQL injection attacks commonly target both query string parameters and request body (POST data) because user input in these locations is often directly concatenated into SQL queries without proper sanitization. A WAF configured to inspect and filter these parameters can block malicious SQL payloads before they reach the database server, as these are primary vectors for such attacks.
Which TWO of the following are common web application vulnerabilities that allow an attacker to inject malicious code? (Select exactly 2)
Explanation: Cross-Site Scripting (XSS) is a common web application vulnerability that allows an attacker to inject malicious client-side scripts (typically JavaScript) into web pages viewed by other users. This occurs when an application includes untrusted data in a web page without proper validation or escaping, enabling the attacker to execute arbitrary code in the victim's browser within the context of the trusted site. SQL Injection is another critical web application vulnerability where an attacker can inject malicious SQL code into input fields, which is then executed by the application's database. This can lead to unauthorized access to, modification of, or deletion of data, or even full control over the database server.
Which THREE of the following are effective countermeasures against DNS poisoning attacks? (Select exactly 3)
Explanation: Restricting recursive queries to trusted sources prevents attackers from using your DNS server as an open resolver to cache forged responses. By limiting recursion to authorized clients only, the server will not accept and cache DNS data from external, potentially malicious queries, which is a primary vector for DNS cache poisoning. Implementing DNSSEC provides cryptographic authentication of DNS data, ensuring that resolvers can verify the authenticity and integrity of responses, thereby preventing the acceptance of forged records. A split DNS architecture separates internal and external DNS views, making it more difficult for external attackers to poison internal records or gain information about the internal network, and vice-versa, by ensuring that different sets of information are provided based on the query's origin.
A penetration tester is analyzing a captured TCP session that includes a successful SQL injection attack. Which TWO of the following indicators would most likely confirm that the attack was successful?
Explanation: A successful SQL injection attack is most directly confirmed when the application's response includes database error messages or unexpected data (Option C), indicating that injected SQL was processed by the database. A 500 Internal Server Error (Option B) is also a strong indicator in SQL injection traffic, especially for error-based injection, because the malformed or injected query causes the application or database to return a server error, often with backend details. A 200 OK alone is normal for legitimate requests and does not confirm an attack.
Drag and drop the steps to recover a forgotten Windows administrator password using a bootable Linux USB into the correct order.
Explanation: Recovering a forgotten Windows administrator password using a bootable Linux USB involves booting from the USB, mounting the Windows system partition, navigating to the System32 directory, replacing the sethc.exe (Sticky Keys) executable with a copy of cmd.exe, and then rebooting into Windows. Pressing Shift five times triggers the command prompt with SYSTEM privileges, allowing password reset. The sequence ensures each step builds on the previous one; booting provides the environment, mounting grants access, navigation locates the target, replacement alters the behavior, and rebooting activates the exploit.
+15 more Network and Web Application Attacks questions available
Practice all Network and Web Application Attacks questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Network and Web Application Attacks. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Network and Web Application Attacks questions on the CEH frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Network and Web Application Attacks is tested as part of the Certified Ethical Hacker CEH blueprint. Practicing with targeted Network and Web Application Attacks questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CEH practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Network and Web Application Attacks is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Network and Web Application Attacks practice session with instant scoring and detailed explanations.
Start Network and Web Application Attacks Practice →