Home › Quizzes › Burp Suite and Requests

Burp Suite and Requests

This test consist of multiple choice questions for the Burp suite tool for request manipulation in web apps. This test is important for the CS student and GATE aspirants.

15 Questions Published
Play Quiz Practise this topic out loud

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is/are applicable for 'Action' control for the panel in intercepting request?

  1. It is used to abandon the message so that it is not forwarded.
  2. It is used to review and edit the message to send the message on to the server or browser.
  3. This shows a menu of available actions that can be performed on the currently displayed message.
  4. It is used to check the Proxy history and on intercepted responses.
  5. Both (1) and (2)
Question 2 Multiple Choice (Single Answer)

What is the task of 'Forward' control in intercepting Burp Suite request?

  1. This control is used to edit the message.
  2. It shows a menu of available actions that can be performed on the currently displayed message.
  3. It is used to add a comment to interesting items, to easily identify them later.
  4. It is used to toggle all interception on and off.
  5. None of the above
Question 3 Multiple Choice (Single Answer)

What is the task of 'Comment field' control in intercepting Burp Suite request?

  1. This control is used to edit the message.
  2. It shows a menu of available actions that can be performed on the currently displayed message.
  3. It is used to add a comment to interesting items, to easily identify them later.
  4. It is used to toggle all interceptions on and off.
  5. Both (1) and (3)
Question 4 Multiple Choice (Single Answer)

What is the role of 'Do intercept' action command for HTTP messages?

  1. This command is responsible for the interception of the request.
  2. These command allows to quickly add an interception rule to prevent future interception of messages.
  3. It displays the HTTP status code of the current request.
  4. Both (1) and (2)
  5. Both (1) and (3)
Question 5 Multiple Choice (Single Answer)

Which of the following Burp suite tools is used for web application mapping?

  1. Proxy
  2. Spider
  3. Scanner
  4. Both (1) and (2)
  5. None of the above
Question 6 Multiple Choice (Single Answer)

What is the role of Burp suite proxy in handing request in web application?

  1. The Burp suite proxy manages the configuration of the application.
  2. The Burp suite use 8080 port by default for handling web apps.
  3. The user need to log into the Burp Suite for the responses and requests that pass through each of the proxies.
  4. All of the above
  5. Both (1) and (3)
Question 7 Multiple Choice (Single Answer)

Which of the following is/are correct about Burp suite walkthrough step in web application?

  1. It is used to test the web application.
  2. It is used to intercepting and modification of the request.
  3. It is used to check the session token management for the users.
  4. All of the above
  5. Both (1) and (3)
Question 8 Multiple Choice (Single Answer)

Which of the following is/are a/the false statement(s) about request manipulation in Burp suite?

  1. Burp Comparer is used to identify the difference between two responses of applications quickly in the context of applications on the web.
  2. The Decoder tool is used to identify the differences between failed log in responses using invalid and valid usernames.
  3. Burp Repeater is used for manually reissuing and modifying individual requests of HTTP.
  4. Burp proxy is an HTTP/S interactive proxy server for testing and attacking applications on the web.
  5. None of the above
Question 9 Multiple Choice (Single Answer)

Which of the following is/are correct about cluster bomb attack?

  1. It uses multiple payload sets.
  2. The total number of requests generated by the attack is the product of the number of payloads.
  3. This attack iterates through all payload sets simultaneously.
  4. Both (1) and (3)
  5. Both (1) and (2)
Question 10 Multiple Choice (Single Answer)

What are the resolution steps when Burp does not intercept HTTPS requests?

  1. To check the browser configuration.
  2. To install Burp's CA certificate in your browser.
  3. To request additional memory for Burp by starting Burp from the command line using the -Xmx argument.
  4. To run the Burp scanner again and again.
  5. Both (1) and (2)
Question 11 Multiple Choice (Single Answer)

Which of the following is/are applicable about extending Burp proxy?

  1. It is used to modify the http request easily.
  2. It is better to use in case of web application hacking.
  3. For testing multiple extension.
  4. All of the above
  5. Both (1) and (3)
Question 12 Multiple Choice (Single Answer)

What are the tasks related to Burp Proxy for intercepting and manipulating the request?

  1. Intercept and modify all HTTP/S traffic passing in both directions.
  2. This tool manage the content and serialization of request.
  3. Burp proxy is used to test manually the requests and responses.
  4. It is used to modify the requests automatically.
  5. All of the above
Question 13 Multiple Choice (Single Answer)

Which of the following is/are applicable for 'NoClassDefFoundError' in troubleshooting?

  1. This may be the problem related to the location of the jar file.
  2. To resolve this, it is necessary to run the command java-version and confirm that the version being executed is 1.6 or later.
  3. To check whether any new entries are appearing in the Proxy history.
  4. To check the authentication failures.
  5. Both (1) and (2)
Question 14 Multiple Choice (Single Answer)

What is the role of sequencer in request manipulation in burp suite?

  1. This tool is a better choice for application security.
  2. It defines the application's status in terms of sessions.
  3. It maintains the application performance for virus security.
  4. All of the above
  5. Both (1) and (2)
Question 15 Multiple Choice (Single Answer)

Which of the following is/are true about XSS with Burp-Repeater tool?

  1. This tool checks the cross site scripting vulnerability.
  2. This tool uses a java script syntax like code to check the vulnerability.
  3. It is used for authentication of the web applications.
  4. All of the above
  5. Both (1) and (2)
← Back to Quizzes