GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

chapter 3

Rashad Smith 20 questions

Take the quiz

Questions in this quiz (20)

  1. 1Which of these is not a reason why securing server-side web applications is difficult ?
    1. AThe processors on clients are smaller than on web servers and thus they are easier to defend .
    2. BAlthough traditional network security devices can block traditional network attacks, they cannot always block web applications attacks
    3. Cmany web applications attacks exploit previously unknown vulnerabilities
    4. DBy design dynamic server-side web applications accept user input that can contain malicious code
  2. 2Which of these is not an HTTP header attack ?
    1. Acontent-length
    2. Breferer
    3. Caccept-language
    4. Dresponse splitting
  3. 3What is another name for a locally shared object ?
    1. Aflash cookie
    2. Bsession cookie
    3. Cram cookie
    4. Dsecure cookie
  4. 4Browser plug-ins
    1. Acan be embedded inside a webpage but add-ons cannot
    2. Bonly function on web servers
    3. Chave additional functionality to the entire browser
    4. Dhave been replaced by browser extensions
  5. 5An attacker who manipulates the maximum size of an integer type would be performing what kind of attack?
    1. Ainteger overflow
    2. Bbuffer overflow
    3. Creal number
    4. Dheap size
  6. 6What kind of attack is performed by an attacker who takes advantage of the inadvertent and unauthorized access built through three succeeding systems that all trust one another ?
    1. Aprivilege rights
    2. Bheap spray
    3. Ctransitive
    4. Dvertical escalation
  7. 7Which statement is correct regarding why traditional network security devices cannot be used to block web application attacks ?
    1. Atraditional network security devices ignore the content of http traffic which is the vehicle of web application attacks
    2. BWeb application attacks use web browsers that cannot be controlled on a local computer
    3. Cnetwork security devices cannot prevent attacks from web resources
    4. DThe complex nature of TCP/IP allows for too many ping sweeps to be blocked
  8. 8What do attackers use buffer overflows to do ?
    1. Acorrupt the kernel so the computer cannot reboot.
    2. Bplace a virus into the kernel
    3. Cerase buffer overflow signature files
    4. Dpoint to another area in data memory that contains the attacker's malware code
  9. 9What is unique about a cross-site scripting (XSS) attack compared to other injection attacks?
    1. ASQL code is used in an XSS attack
    2. BXSS requires the use of a browser
    3. CXSS does not attack the Web application server to steal or corrupt its information
    4. DXSS attacks are rarely used anymore compared to other injection attacks
  10. 10 A cookie that was not created by the Web site being viewed is called a
    1. Afirst-party cookie
    2. Bsecond-party cookie
    3. Cthird-party cookie
    4. Dfourth-party cookie

Information

Description
Quiz on chapter 3 , created by Rashad Smith on 01/11/2016.
Language
English
Views
0
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?