毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
Certified AppSec Pentesting eXpert (CAPenX) 試験
最新更新時間: 2026/09/21
【秋学習応援セール｜10月限定キャンペーン】：CAPenX 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。
実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。
さらに試験準備時間の35％を節約するには、CAPenX 問題集を使用してください。
Question No : 1
How can you bypass class restrictions during deserialization in Java apps?
正解:
Explanation:
Question No : 2
How do you determine if deserialized data is signed or encrypted?
正解:
Explanation:
Question No : 3
How do you perform logic attacks through deserialization when RCE is not possible?
正解:
Explanation:
Question No : 4
How do you verify whether a PHP app unserializes user data but restricts class usage?
正解:
Explanation:
Question No : 5
How do you test blind deserialization when there's no visible response?
正解:
Explanation:
Question No : 6
How do you fingerprint the backend language to tailor deserialization attacks?
正解:
Explanation:
Question No : 7
How do you detect insecure YAML deserialization in Python or Ruby apps?
正解:
Explanation:
Question No : 8
How do you use gadget chains to craft payloads in Java deserialization?
正解:
Explanation:
Question No : 9
How do you use Burp Suite to identify and test deserialization via cookies?
正解:
Explanation:
Question No : 10
How do you exploit unsafe deserialization in Ruby applications using Marshal.load()?
正解:
Explanation:
Question No : 11
How do you detect deserialization via insecure PHP unserialize()?
正解:
Explanation:
Question No : 12
How can you exploit insecure Python pickle deserialization in a web app?
正解:
Explanation:
Question No : 13
How do you identify .NET BinaryFormatter deserialization vulnerabilities?
正解:
Explanation:
Question No : 14
How do you exploit an insecure Java deserialization endpoint using ysoserial?
正解:
Explanation:
Question No : 15
How do you identify Java serialized object data in a request?
正解:
Explanation: