GOWUKAKU｜IT認定資格の試験問題集（PDF版）およびオンライン模擬練習を提供しています
Certified AppSec Pentester (CAPen) 試験
最新更新時間: 2026/10/11
【仕様案内】：CAPen 問題集（PDF版）には、日本語版と英語版の2言語セットが含まれています。
問題集のサンプル問題を練習し、出題範囲のポイントと現在の理解度を確認することができます。
全303問を収録したPDF版は、CAPen 問題集からご確認いただけます。
Question No : 1
How do you detect missing Forward Secrecy support?
正解:
Explanation:
Question No : 2
How can you detect TLS downgrade attacks (e.g., FREAK, POODLE)?
正解:
Explanation:
Question No : 3
How do you detect support for client-side renegotiation DoS vectors?
正解:
Explanation:
Question No : 4
How do you test if HSTS (HTTP Strict Transport Security) is properly implemented?
正解:
Explanation:
Question No : 5
How do you detect certificate transparency (CT) violations?
正解:
Explanation:
Question No : 6
How do you validate the hostname in TLS certificates for mismatches?
正解:
Explanation:
Question No : 7
How do you detect TLS certificate chain issues (e.g., incomplete chain)?
正解:
Explanation:
Question No : 8
How do you identify support for insecure renegotiation in TLS?
正解:
Explanation:
Question No : 9
How do you test if a server accepts TLS connections with weak key lengths?
正解:
Explanation:
Question No : 10
How do you detect self-signed or expired TLS certificates?
正解:
Explanation:
Question No : 11
How do you check for weak cipher suites using testssl.sh?
正解:
Explanation:
Question No : 12
How do you verify the use of secure password hashing algorithms in a REST API-based app?
正解:
Explanation:
Question No : 13
How do you determine whether login tokens expire properly after logout?
正解:
Explanation:
Question No : 14
How do you identify credentials exposed in public repositories or configuration files?
正解:
Explanation:
Question No : 15
How do you analyze the strength of a mobile app’s password policy?
正解:
Explanation: