Question 1
In a classic SQL injection attack, which SQL keyword allows an attacker to append an additional SELECT query to the original query in order to retrieve data from a different table?
Correct Answer:
UNION
Question 2
When testing for blind SQL injection, an attacker submits the payload `' AND SLEEP(5)--` and the application takes five additional seconds to respond. What does this confirm?
Correct Answer:
The application is vulnerable to time-based blind SQLi
Question 3
A reflected XSS payload is injected via a URL query parameter and immediately rendered into an HTML attribute without encoding. Which of the following payloads would most reliably break out of the attribute context and execute JavaScript?
Correct Answer:
" onmouseover="alert(1)
Question 4
A stored XSS payload is inserted into a database via a product review form and later rendered on the product page for all visitors. Which characteristic distinguishes stored XSS from reflected XSS?
Correct Answer:
The payload persists in the application and affects multiple users automatically
Question 5
In a CSRF attack, which same-site cookie attribute provides the strongest protection by preventing the browser from sending cookies on any cross-site request, including top-level navigations?
Correct Answer:
SameSite=Strict
Question 1
Exam overview

About this Exam

Prepare with the BSCP Practice Questions - Burp Suite Certified Practitioner (BSCP) Exam practice quiz. This question bank includes 100 questions covering attacker, application, attack, parameter, and request. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

BSCP Practice Questions - Burp Suite Certified Practitioner (BSCP) Exam

This practice set contains 100 questions from the matching question bank and focuses on attacker, application, attack, parameter, and request. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions