GOWUKAKU｜IT認定資格の最新の試験問題集（PDF版・無料サンプル問題）を提供しています
Certified AppSec Pentesting eXpert (CAPenX) 試験
最終更新日: 2026/10/17 収録内容確認済 ｜ PDF問題集: 全 390 問収録
【仕様案内】：CAPenX 問題集（PDF版）は日本語版＆英語版の2言語セットに対応しております（日本語版が準備中の科目は英語版を即時ダウンロードのうえ、日本語版は準備完了次第ご登録メールへ自動送付いたします）。
本ページでは問題集の無料サンプル問題を公開しており、出題形式や現在の理解度を確認することができます。
全390問を収録したPDF版は、CAPenX 問題集からご確認いただけます。
Question No : 1
How can you bypass class restrictions during deserialization in Java apps?
正解:
Explanation:
Question No : 2
How do you determine if deserialized data is signed or encrypted?
正解:
Explanation:
Question No : 3
How do you perform logic attacks through deserialization when RCE is not possible?
正解:
Explanation:
Question No : 4
How do you verify whether a PHP app unserializes user data but restricts class usage?
正解:
Explanation:
Question No : 5
How do you test blind deserialization when there's no visible response?
正解:
Explanation:
Question No : 6
How do you fingerprint the backend language to tailor deserialization attacks?
正解:
Explanation:
Question No : 7
How do you detect insecure YAML deserialization in Python or Ruby apps?
正解:
Explanation:
Question No : 8
How do you use gadget chains to craft payloads in Java deserialization?
正解:
Explanation:
Question No : 9
How do you use Burp Suite to identify and test deserialization via cookies?
正解:
Explanation:
Question No : 10
How do you exploit unsafe deserialization in Ruby applications using Marshal.load()?
正解:
Explanation:
Question No : 11
How do you detect deserialization via insecure PHP unserialize()?
正解:
Explanation:
Question No : 12
How can you exploit insecure Python pickle deserialization in a web app?
正解:
Explanation:
Question No : 13
How do you identify .NET BinaryFormatter deserialization vulnerabilities?
正解:
Explanation:
Question No : 14
How do you exploit an insecure Java deserialization endpoint using ysoserial?
正解:
Explanation:
Question No : 15
How do you identify Java serialized object data in a request?
正解:
Explanation: