Question 1
Which HTTP method should an API penetration tester specifically test beyond GET and POST to check for unintended functionality exposure?
Correct Answer:
PUT, DELETE, PATCH, and OPTIONS
Question 2
During GraphQL API reconnaissance, which query allows an attacker to enumerate all available types, queries, mutations, and fields in the schema?
Correct Answer:
{ __schema { types { name
Question 3
When testing OAuth 2.0 implementations, which vulnerability arises when the authorization server does not validate the `redirect_uri` parameter strictly?
Correct Answer:
Authorization code interception via open
Question 4
An application uses a JWT signed with RS256. The attacker changes the `alg` header to `HS256` and signs the token with the server's RSA public key as the HMAC secret. What attack is this?
Correct Answer:
RS256-to-HS256 algorithm confusion attack
Question 5
Which tool is the primary industry-standard choice for automated and manual web application penetration testing, including API interception, repeating requests, and active scanning?
Correct Answer:
Burp Suite
Question 1
Exam overview

About this Exam

Prepare with the eWPTX Practice Questions - eWPTX Web Application Penetration Tester eXtreme (eWPTXv3) Exam practice quiz. This question bank includes 100 questions covering application, injection, testing, attack, and technique. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

eWPTX Practice Questions - eWPTX Web Application Penetration Tester eXtreme (eWPTXv3) Exam

This practice set contains 100 questions from the matching question bank and focuses on application, injection, testing, attack, and technique. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions