毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
Certified AppSec Pentester (CAPen) 試験
最新更新時間: 2026/09/21
【秋学習応援セール｜10月限定キャンペーン】：CAPen 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。
実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。
さらに試験準備時間の35％を節約するには、CAPen 問題集を使用してください。
Question No : 1
How do you detect missing Forward Secrecy support?
正解:
Explanation:
Question No : 2
How can you detect TLS downgrade attacks (e.g., FREAK, POODLE)?
正解:
Explanation:
Question No : 3
How do you detect support for client-side renegotiation DoS vectors?
正解:
Explanation:
Question No : 4
How do you test if HSTS (HTTP Strict Transport Security) is properly implemented?
正解:
Explanation:
Question No : 5
How do you detect certificate transparency (CT) violations?
正解:
Explanation:
Question No : 6
How do you validate the hostname in TLS certificates for mismatches?
正解:
Explanation:
Question No : 7
How do you detect TLS certificate chain issues (e.g., incomplete chain)?
正解:
Explanation:
Question No : 8
How do you identify support for insecure renegotiation in TLS?
正解:
Explanation:
Question No : 9
How do you test if a server accepts TLS connections with weak key lengths?
正解:
Explanation:
Question No : 10
How do you detect self-signed or expired TLS certificates?
正解:
Explanation:
Question No : 11
How do you check for weak cipher suites using testssl.sh?
正解:
Explanation:
Question No : 12
How do you verify the use of secure password hashing algorithms in a REST API-based app?
正解:
Explanation:
Question No : 13
How do you determine whether login tokens expire properly after logout?
正解:
Explanation:
Question No : 14
How do you identify credentials exposed in public repositories or configuration files?
正解:
Explanation:
Question No : 15
How do you analyze the strength of a mobile app’s password policy?
正解:
Explanation: