GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

Analyse 9 week 5

Joost Stam 15 Fragen

Quiz starten

Fragen in diesem Quiz (15)

  1. 1Which of the following descriptions defines a Trojan Horse in the context of computer security?
    1. AA malicious computer program which appears to be a gift, but it actually is a trap.
    2. BA malicious software that when executed can replicates itself by modifying other computer programs and inserting its own code.
    3. CAny attempt to expose, alter, disable, destroy, steal or gain unauthorized access to or make unauthorized use of a digital resource.
    4. DA weakness in a computer system which can be exploited by an attacker, to perform unauthorized actions within the system.
  2. 2In browsing a website, If the document contains hypertext that references embedded contents, such as images and Java applets, the browser will need _____________ to display all the contents.
    1. Aa persistent connection
    2. Bto send a single request
    3. Cfast internet connection
    4. Dto send multiple requests
  3. 3What is the probable result of the attached code, assuming the bank accepts this kind of form?

    <form name="f" action="https://www.bank.example/pay.asp" method="post">
    <input type="hidden" name="from-account" value="1234.56.78901"/>
    <input type="hidden" name="to-account" value="9876.54.32109"/>
    <input type="hidden" name="amount" value="10000.00"/>
    </form>
    <script>document.f.submit()</script>
    1. A10000.00 will be transferred to the account No. 9876.54.32109,even if the user is not logged in.
    2. BBecause the POST request is used, the attacker cannot transfer the money.
    3. C10000.00 will be transferred to the account No. 9876.54.32109 only if user is logged in.
    4. DAll the above options are possible.
  4. 4The ticket system works against Web Trojans, because:

    1) attackers will not be able to guess what ticket values you may have given to the user.
    2) attackers will not be able to insert tickets into the victim’s ticket pool on the server side.
    3) attackers will not be allowed to inject scripts into the tickets of users.

    choose the most appropriate answer.
    1. A1 and 2 are correct.
    2. B1 and 3 are correct.
    3. C2 and 3 are correct.
    4. DAll are correct.
  5. 5To avoid being vulnerable to Cross-site Scripting, a web site must be very careful with what it receive from the users.
    1. ARichtig
    2. BFalsch
  6. 6It is not recommended to use referer header for security purpose in web application, however it can be used for a secure authentication or authorization.
    1. ARichtig
    2. BFalsch
  7. 7To protect against Web Trojans, which technique is an appropriate approach to be implemented by developers?
    1. AEscaping meta-character
    2. BTicket system
    3. CHTML encoding
    4. DTag filtering
  8. 8The ticketing system against Web Trojans will also protect the computer against the Cross-site Scripting.
    1. ARichtig
    2. BFalsch
  9. 9Check boxes and selection lists which are generated by server are not considered in input validation process, because users can only select the predefined options from the provided list.
    1. ARichtig
    2. BFalsch
  10. 10When the browser requests a document from a remote server, it often stores a copy on the disk or in
    memory of user's computer. This copy is known as ___________________.
    1. Alocal cache
    2. Bproxy cache
    3. Cshared cache
    4. Dcookie

Informationen

Beschreibung
Learning Technology Quiz am Analyse 9 week 5, erstellt von Joost Stam am 07/04/2019.
Sprache
English
Aufrufe
25
Schlagwörter
learning technology
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck