Test
Chapter 5
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (20)
1Which attack intercepts communications between a web browser and the underlying computer?
- Aman-in-the-middle (MITM)
- Bman-in-the-browser (MITB)
- Creplay
- DARP poisoning
2Olivia was asked to protect the system from a DNS poisoning attack. What are the locations she would need to protect?
- AWeb server buffer and host DNS server
- BReply referrer and domain buffer
- CWeb browser and browser add-on
- DHost table and external DNS server
3Newton is concerned that attackers could be exploiting a vulnerability in software to gain access to resources that the user normally would be restricted from accessing. What type of attack is he worried about?
- APrivilege escalation
- BSession replay
- CScaling exploit
- DAmplification
4Which of the following adds new functionality to the web browser so that users can play music, view videos, or display special graphical images within the browser?
- AExtensions
- BScripts
- CPlug-ins
- DAdd-ons
5An attacker who manipulates the maximum size of an integer type would be performing what kind of attack?
- Ainteger overflow
- Bbuffer overflow
- Cnumber overflow
- Dheap overflow
6What kind of attack is performed by an attacker who takes advantage of the inadvertent and unauthorized access built through three succeeding systems that all trust one another?
- Aprivilege escalation
- Bcross-site attack
- Chorizontal access attack
- Dtransverse attack
7Which statement is correct regarding why traditional network security devices cannot be used to block web application attacks?
- AThe complex nature of TCP/IP allows for too many ping sweeps to be blocked.
- BWeb application attacks use web browsers that cannot be controlled on a local computer.
- CNetwork security devices cannot prevent attacks from web resources.
- DTraditional network security devices ignore the content of HTTP traffic, which is the vehicle of web application attacks
8What is the difference between a DoS and a DDoS attack?
- ADoS attacks are faster than DDoS attacks
- BDoS attacks use fewer computers than DDoS attacks
- CDoS attacks do not use DNS servers as DDoS attacks do
- DDoS attacks user more memory than a DDoS attack
9John was explaining about an attack that accepts user input without validating it and uses that input in a response. What type of attack was he describing?
- ASQL
- BXSS
- CXSRF
- DDDoS DNS
10Which attack uses the user’s web browser settings to impersonate that user?
- AXDD
- BXSRF
- CDomain hijacking
- DSession hijacking
11What is the basis of an SQL injection attack?
- Ato expose SQL code so that it can be examined
- Bto have the SQL server attack client web browsers
- Cto insert SQL statements through unfiltered user input
- Dto link SQL servers into a botnet
12Which action cannot be performed through a successful SQL injection attack?
- Adiscover the names of different fields in a table
- Breformat the web application server’s hard drive
- Cdisplay a list of customer telephone numbers
- Derase a database table
13Attackers who register domain names that are similar to legitimate domain names are performing _____.
- AAddress resolution
- BHTTP manipulation
- CHTML squatting
- DURL hijacking
14What type of attack involves manipulating third-party ad networks?
- ASession advertising
- BMalvertising
- CClickjacking
- DDirectory traversal
15Why are extensions, plug-ins, and add-ons considered to be security risks?
- AThey are written in Java, which is a weak language.
- BThey have introduced vulnerabilities in browsers
- CThey use bitcode.
- DThey cannot be uninstalled.
16What is a session token?
- AXML code used in an XML injection attack
- Ba random string assigned by a web server
- Canother name for a third-party cookie
- Da unique identifier that includes the user’s email address
17Which of these is not a DoS attack?
- ASYN flood
- BDNS amplification
- Csmurf attack
- Dpush flood
18What type of attack intercepts legitimate communication and forges a fictitious response to the sender?
- ASIDS
- Binterceptor
- CMITM
- DSQL intrusion
19A replay attack _____.
- Acan be prevented by patching the web browser
- Bis considered to be a type of DoS attack
- Cmakes a copy of the transmission for use at a later time
- Dreplays the attack over and over to flood the server
20DNS poisoning _____.
- Afloods a DNS server with requests until it can no longer respond
- Bis rarely found today due to the use of host tables
- Csubstitutes DNS addresses so that the computer is automatically redirected to another device
- Dis the same as ARP poisoning
Información
- Descripción
- Information Technology Test sobre Chapter 5, creado por Justin Bittar el 14/12/2019.
- Autor
- Justin Bittar
- Idioma
- English
- Visitas
- 7
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test