Quiz
Analyse 9 week 5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (15)
1Which of the following descriptions defines a Trojan Horse in the context of computer security?
- AA malicious computer program which appears to be a gift, but it actually is a trap.
- BA malicious software that when executed can replicates itself by modifying other computer programs and inserting its own code.
- CAny attempt to expose, alter, disable, destroy, steal or gain unauthorized access to or make unauthorized use of a digital resource.
- DA weakness in a computer system which can be exploited by an attacker, to perform unauthorized actions within the system.
2In browsing a website, If the document contains hypertext that references embedded contents, such as images and Java applets, the browser will need _____________ to display all the contents.
- Aa persistent connection
- Bto send a single request
- Cfast internet connection
- Dto send multiple requests
3What is the probable result of the attached code, assuming the bank accepts this kind of form?
<form name="f" action="https://www.bank.example/pay.asp" method="post">
<input type="hidden" name="from-account" value="1234.56.78901"/>
<input type="hidden" name="to-account" value="9876.54.32109"/>
<input type="hidden" name="amount" value="10000.00"/>
</form>
<script>document.f.submit()</script>- A10000.00 will be transferred to the account No. 9876.54.32109,even if the user is not logged in.
- BBecause the POST request is used, the attacker cannot transfer the money.
- C10000.00 will be transferred to the account No. 9876.54.32109 only if user is logged in.
- DAll the above options are possible.
4The ticket system works against Web Trojans, because:
1) attackers will not be able to guess what ticket values you may have given to the user.
2) attackers will not be able to insert tickets into the victim’s ticket pool on the server side.
3) attackers will not be allowed to inject scripts into the tickets of users.
choose the most appropriate answer.- A1 and 2 are correct.
- B1 and 3 are correct.
- C2 and 3 are correct.
- DAll are correct.
5To avoid being vulnerable to Cross-site Scripting, a web site must be very careful with what it receive from the users.
- ATrue
- BFalse
6It is not recommended to use referer header for security purpose in web application, however it can be used for a secure authentication or authorization.
- ATrue
- BFalse
7To protect against Web Trojans, which technique is an appropriate approach to be implemented by developers?
- AEscaping meta-character
- BTicket system
- CHTML encoding
- DTag filtering
8The ticketing system against Web Trojans will also protect the computer against the Cross-site Scripting.
- ATrue
- BFalse
9Check boxes and selection lists which are generated by server are not considered in input validation process, because users can only select the predefined options from the provided list.
- ATrue
- BFalse
10When the browser requests a document from a remote server, it often stores a copy on the disk or in
memory of user's computer. This copy is known as ___________________.- Alocal cache
- Bproxy cache
- Cshared cache
- Dcookie
11An approach cumbersome to the user that would work to avoid the threat of Trojans is to require re-authentication of the user for every action that changes something.
- ATrue
- BFalse
12A voting website has a form containing HTML code shown in the attached image.
What is the main reason which allows this voting website be easily attacked?
<form action="http://www.voting.example/vote.asp" method="get">
<input type="radio" name="alt" value="1"/>Foo<br/>
<input type="radio" name="alt" value="2"/>Bar<br/>
:
:
</form>- ABecause the form uses the GET method.
- BBecause the code does not include an encryption algorithm.
- CMaybe the website is not protected by an Antivirus.
- DBecause the radio button input can be easily modified.
13In general, the referer header should not be used for security, because _________.
- Amany developers filter it out for privacy reasons.
- Bare often missing in legitimate requests.
- Cit helps attackers to easily save web pages.
- Dit comes from the client-side.
14A secure web application will massage invalid input to make it valid.
- ATrue
- BFalse
15In the ticketing system, for each ticket generated, we should add a string naming the action it refers to, and store the combined string in a ____________ in the session of the user who receives the offer.
- Aticket pool
- Bcookie
- Cheader
- Dsafe place
Information
- Description
- Learning Technology Quiz on Analyse 9 week 5, created by Joost Stam on 07/04/2019.
- Author
- Joost Stam
- Language
- English
- Views
- 25
- Tags
- Rating
- No ratings yet Rate this quiz