GOWUKAKU｜IT認定資格の最新の試験問題集（PDF版・無料サンプル問題）を提供しています
Certified AppSec Pentester (CAPen) 試験
最終更新日: 2026/10/16 収録内容確認済 ｜ PDF問題集: 全 303 問収録
【仕様案内】：CAPen 問題集（PDF版）は日本語版＆英語版の2言語セットに対応しております（日本語版が準備中の科目は英語版を即時ダウンロードのうえ、日本語版は準備完了次第ご登録メールへ自動送付いたします）。
本ページでは問題集の無料サンプル問題を公開しており、出題形式や現在の理解度を確認することができます。
全303問を収録したPDF版は、CAPen 問題集からご確認いただけます。
Question No : 1
How do you detect missing Forward Secrecy support?
正解:
Explanation:
Question No : 2
How can you detect TLS downgrade attacks (e.g., FREAK, POODLE)?
正解:
Explanation:
Question No : 3
How do you detect support for client-side renegotiation DoS vectors?
正解:
Explanation:
Question No : 4
How do you test if HSTS (HTTP Strict Transport Security) is properly implemented?
正解:
Explanation:
Question No : 5
How do you detect certificate transparency (CT) violations?
正解:
Explanation:
Question No : 6
How do you validate the hostname in TLS certificates for mismatches?
正解:
Explanation:
Question No : 7
How do you detect TLS certificate chain issues (e.g., incomplete chain)?
正解:
Explanation:
Question No : 8
How do you identify support for insecure renegotiation in TLS?
正解:
Explanation:
Question No : 9
How do you test if a server accepts TLS connections with weak key lengths?
正解:
Explanation:
Question No : 10
How do you detect self-signed or expired TLS certificates?
正解:
Explanation:
Question No : 11
How do you check for weak cipher suites using testssl.sh?
正解:
Explanation:
Question No : 12
How do you verify the use of secure password hashing algorithms in a REST API-based app?
正解:
Explanation:
Question No : 13
How do you determine whether login tokens expire properly after logout?
正解:
Explanation:
Question No : 14
How do you identify credentials exposed in public repositories or configuration files?
正解:
Explanation:
Question No : 15
How do you analyze the strength of a mobile app’s password policy?
正解:
Explanation: