HomeCertificationsGWEB (GIAC Web Application Defender)
Intermediate 1 enrolled

GWEB (GIAC Web Application Defender)

GIAC/SANS · GWEB

GIAC's web application security certification from SANS. Master web app defense including OWASP Top 10, authentication, session management, and WAF configuration.

5 exam domains7 lessons35 questions35h study time
Request access

Exam Details

Questions75
Duration180 min
Passing Score68%
Exam Cost$979

Exam Domains Covered

1

Web Application Architecture

1 lessons

2

OWASP Top 10 Defense

1 lessons

3

Authentication & Session Security

2 lessons

4

Web Application Firewalls

2 lessons

5

Secure Development Practices

1 lessons

Sample Practice Questions

Q1. An attacker submits: ' OR 1=1-- in a login form. Which attack is this?

A.SQL injection
B.Cross-site scripting
C.LDAP injection
D.Command injection

Enrol in the prep track to see the answer

Q2. A stored XSS vulnerability allows an attacker to:

A.Modify the server's database directly
B.Inject persistent malicious scripts that execute for every visitor
C.Decrypt encrypted communications
D.Bypass network firewalls

Enrol in the prep track to see the answer

Request access to all 35 practice questions

What's Included

Practice Questions

35 practice questions spread across the GWEB exam domains, in a quiz at the end of each lesson.

Study Plan

Enter your exam date and the hours you can study, and get a schedule for working through the domains.

Progress Tracking

See how many lessons you have completed in each of the 5 domains.

How do you start GWEB (GIAC Web Application Defender) prep?

Request access, then add credits and enrol in this track for 30 credits. You get all 35 practice questions, a study plan and progress tracking.

Request access
Browse all certifications