Quiz
Security Midterm Practice
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1Which of the following is an example of an anti-pattern?
- ASingleton
- BMVC
- CComposition
- DNone of the above
2A defender can only defend against known attacks
- ATrue
- BFalse
3Black hat hackers _____
- AInform organizations about vulnerabilities
- BUsually have written permission
- CAre highly skilled
- DHave financial, political, or personal motivation
4A flaw is easy to find and fix.
- ATrue
- BFalse
5Which of the following are managed programming languages?
- AC++
- BJava
- CC#
- DC--
6A hacker stealing credit card information is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
- DAll of the above
7Which of the following should be used to stop a race condition from occurring within threads in the same process?
- ALock
- BCritical Section
- CMutex Semaphore
- DAll of the above
8Nate getting a refund for his game purchases is an example of what?
- AConfidentiality
- BIntegrity
- CAvailability
9The billion laughs is an example of a what?
- ADenial of Service
- BInteger overflow
- CBuffer overflow
- DInjection
10A String object is immutable
- ATrue
- BFalse
11A char[] object is immutable
- ATrue
- BFalse
12An exception thrown in a parent/super constructor can be caught by the child constructor
- ATrue
- BFalse
13A final class cannot ______
- ABe instantiated
- BInherit other classes
- CHave other classes inherit it
- DBe serialized
14What is the advantage of using serialPersistentFields rather than transient?
- ASave disk space and memory
- BSpecify fields to serialize
- CEncrypt sensitive information
- DDynamically specify what fields to not serialize
15A stored XSS attack is ____
- AClient/browser side
- BServer side
16What class and method is used to execute privileged code?
- AAccessController.doPrivileged
- BSecurityManager.checkPermission
- CSecurityManager.doPrivileged
- DAccessController.checkPermission
17Requesting data from a banking site in the background could be prevented by what?
- ASOP (Same-Origin Policy)
- BCSRF Token
- CInput validation
- DEscaping HTML tags
18What tool can be used to identify open ports on a remote computer?
- ANmap
- BWireshark
- COWASP ZAP
- DOWASP Mantra
19Stored XSS attacks require a user to perform some action first
- ATrue
- BFalse
20CSRF tokens can be sent to the user as a ____ and verified from a _____
- AForm input field, Session
- BHeader, Database
- CMeta tag, Cookie
Information
- Description
- Quiz on Security Midterm Practice, created by Nick Hamnett on 13/03/2018.
- Author
- Nick Hamnett
- Language
- English
- Views
- 11
- History
- Created on 13 Mar 2018 · updated on 13 Mar 2018
- Tags
- Rating
- No ratings yet Rate this quiz