Cyber Security Website Attacks
Showing posts with label Cyber Security Website Attacks. Show all posts
Showing posts with label Cyber Security Website Attacks. Show all posts

Your organization is preparing to deploy a web-based application, which will accept user input. Which of the following will test the reliability of this application to maintain availability and data integrity?

Your organization is preparing to deploy a web-based application, which will accept user input. Which of the following will test the reliability of this application to maintain availability and data integrity?



A. Secure coding
B. Input validation
C. Error handling
D. Fuzzing


Answer: D. Fuzzing

Your organization hosts a web site within a DMZ and the web site accesses a database server in the internal network. ACLs on firewalls prevent any connections to the database server except from the web server. Database fields holding customer data are encrypted and all data in transit between the web site server and the database server are encrypted. Which of the following represents the GREATEST risk to the data on the server?

Your organization hosts a web site within a DMZ and the web site accesses a database server in the internal network. ACLs on firewalls prevent any connections to the database server except from the web server. Database fields holding customer data are encrypted and all data in transit between the web site server and the database server are encrypted. Which of the following represents the GREATEST risk to the data on the server?



A. Theft of the database server
B. XML injection
C. SQL injection
D. Sniffing


Answer: C. SQL injection

Homer recently received an email thanking him for a purchase that he did not make. He asked an administrator about it and the administrator noticed a pop-up window, which included the following code:

Homer recently received an email thanking him for a purchase that he did not make. He asked an administrator about it and the administrator noticed a pop-up window, which included the following code:


<body onload="document.getElementByID('myform').submit()">
<form id="myForm" action="gcgapremium.com/purchase.php" method="post"
<input name="Buy Now" value="Buy Now" />
</form>
</body>

What is the MOST likely explanation?


A. XSRF
B. Buffer overflow
C. SQL injection
D. Fuzzing


Answer: A. XSRF

While creating a web application, a developer adds code to limit data provided by users. The code prevents users from entering special characters. Which of the following attacks will this code MOST likely prevent?

While creating a web application, a developer adds code to limit data provided by users. The code prevents users from entering special characters. Which of the following attacks will this code MOST likely prevent?



A. Sniffing
B. Spoofing
C. XSS
D. Pharming


Answer: C. XSS

Subscribe to: Posts (Atom)