Quiz
Security Midterm Practice
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (20)
1Which of the following is an example of an anti-pattern?
- ASingleton
- BMVC
- CComposition
- DNone of the above
2A defender can only defend against known attacks
- ARichtig
- BFalsch
3Black hat hackers _____
- AInform organizations about vulnerabilities
- BUsually have written permission
- CAre highly skilled
- DHave financial, political, or personal motivation
4A flaw is easy to find and fix.
- ARichtig
- BFalsch
5Which of the following are managed programming languages?
- AC++
- BJava
- CC#
- DC--
6A hacker stealing credit card information is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
- DAll of the above
7Which of the following should be used to stop a race condition from occurring within threads in the same process?
- ALock
- BCritical Section
- CMutex Semaphore
- DAll of the above
8Nate getting a refund for his game purchases is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
9The billion laughs is an example of a what?
- ADenial of Service
- BInteger overflow
- CBuffer overflow
- DInjection
10A String object is immutable
- ARichtig
- BFalsch
11A char[] object is immutable
- ARichtig
- BFalsch
12An exception thrown in a parent/super constructor can be caught by the child constructor
- ARichtig
- BFalsch
13A final class cannot ______
- ABe instantiated
- BInherit other classes
- CHave other classes inherit it
- DBe serialized
14What is the advantage of using serialPersistentFields rather than transient?
- ASave disk space and memory
- BSpecify fields to serialize
- CEncrypt sensitive information
- DDynamically specify what fields to not serialize
15A stored XSS attack is ____
- AClient/browser side
- BServer side
16What class and method is used to execute privileged code?
- AAccessController.doPrivileged
- BSecurityManager.checkPermission
- CSecurityManager.doPrivileged
- DAccessController.checkPermission
17Requesting data from a banking site in the background could be prevented by what?
- ASOP (Same-Origin Policy)
- BCSRF Token
- CInput validation
- DEscaping HTML tags
18What tool can be used to identify open ports on a remote computer?
- ANmap
- BWireshark
- COWASP ZAP
- DOWASP Mantra
19Stored XSS attacks require a user to perform some action first
- ARichtig
- BFalsch
20CSRF tokens can be sent to the user as a ____ and verified from a _____
- AForm input field, Session
- BHeader, Database
- CMeta tag, Cookie
Informationen
- Beschreibung
- Quiz am Security Midterm Practice, erstellt von Nick Hamnett am 13/03/2018.
- Autor
- Nick Hamnett
- Sprache
- English
- Aufrufe
- 11
- Verlauf
- Erstellt am 13 Mär 2018 · aktualisiert am 13 Mär 2018
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz