Quiz
Security Midterm Practice
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (20)
1Which of the following is an example of an anti-pattern?
- ASingleton
- BMVC
- CComposition
- DNone of the above
2A defender can only defend against known attacks
- AVerdadeiro
- BFalso
3Black hat hackers _____
- AInform organizations about vulnerabilities
- BUsually have written permission
- CAre highly skilled
- DHave financial, political, or personal motivation
4A flaw is easy to find and fix.
- AVerdadeiro
- BFalso
5Which of the following are managed programming languages?
- AC++
- BJava
- CC#
- DC--
6A hacker stealing credit card information is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
- DAll of the above
7Which of the following should be used to stop a race condition from occurring within threads in the same process?
- ALock
- BCritical Section
- CMutex Semaphore
- DAll of the above
8Nate getting a refund for his game purchases is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
9The billion laughs is an example of a what?
- ADenial of Service
- BInteger overflow
- CBuffer overflow
- DInjection
10A String object is immutable
- AVerdadeiro
- BFalso
11A char[] object is immutable
- AVerdadeiro
- BFalso
12An exception thrown in a parent/super constructor can be caught by the child constructor
- AVerdadeiro
- BFalso
13A final class cannot ______
- ABe instantiated
- BInherit other classes
- CHave other classes inherit it
- DBe serialized
14What is the advantage of using serialPersistentFields rather than transient?
- ASave disk space and memory
- BSpecify fields to serialize
- CEncrypt sensitive information
- DDynamically specify what fields to not serialize
15A stored XSS attack is ____
- AClient/browser side
- BServer side
16What class and method is used to execute privileged code?
- AAccessController.doPrivileged
- BSecurityManager.checkPermission
- CSecurityManager.doPrivileged
- DAccessController.checkPermission
17Requesting data from a banking site in the background could be prevented by what?
- ASOP (Same-Origin Policy)
- BCSRF Token
- CInput validation
- DEscaping HTML tags
18What tool can be used to identify open ports on a remote computer?
- ANmap
- BWireshark
- COWASP ZAP
- DOWASP Mantra
19Stored XSS attacks require a user to perform some action first
- AVerdadeiro
- BFalso
20CSRF tokens can be sent to the user as a ____ and verified from a _____
- AForm input field, Session
- BHeader, Database
- CMeta tag, Cookie
Informações
- Descrição
- Quiz sobre Security Midterm Practice, criado por Nick Hamnett em 13-03-2018.
- Autor
- Nick Hamnett
- Idioma
- English
- Visualizações
- 11
- Histórico
- Criado em 13 mar 2018 · atualizado em 13 mar 2018
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz