Quiz
Preguntas Módulo 3 y 4
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (26)
1Defensive SQl technique where all query input should be validated against ype, length , format and range of input.
- AConstraining Input
- BParametrized Queries
- CPArametrized Store Procedures
- DHandling special characters with escape routines
2Technique in which characters are treated as data instead of characters themselves
- AInput Validation
- BLeast Privileges
- COutput Encoding
- DInput Encoding
3Authentication is the process of verifying a user's identity with an application bu using principals
- ATrue
- BFalse
4Common Threats with user Authentication and Authorization. (select 3)
- AMan in the Middle
- BSession hijacking
- CPrivilege Scalation
- DSession Replay Attack
- EPhishing
5Security configuration settings fotr the IIS are maintained in the IIS metabase?
- ATrue
- BFalse
6Levels of authentication of the .net Framework. (select 2)
- APassport Authentication
- BASP.Net Authentication
- CEnterprise Authentication
- DDigest Authentication
- EWindows Authentication
7ASP.NET authentication that collects user credentials such as username and password directly from the user request and implements customized logic for authenticating users:
- APassPort Authentication
- BWindows Authentication
- CForms Authentication
8Passport authentication is a centralized authentication service from Microsoft for authenticating users.
- ATrue
- BFalse
9A custom or no authentication can't be implemented by creating the ISAPI filter
- ATrue
- BFalse
10Windows Authentication method that sends the user's credentials in an encrypted format:
- ABasic Authentication
- BDigest Authentication
- CAnonymous Authentication
11Kerberos or NTML authentication us used to authenticate clients of the enterprise services applications
- ATrue
- BFalse
12Enterprise Services authentication is performed by issuing RPC at following levels. Select 3
- APacket Integrity
- BPacket
- CAll
- DDefault
- EBasic
- FNone
13ASP.Net provides the following authorization options to authorize cliente: select 3
- A.Net Principals
- BDigest Authorization
- CURL Authorization
- D.Net Roles
- ECode-Based Authorization
14Delegation will only work when asp.net is able to authenticate against a local server:
- ATrue
- BFalse
15impersonation is a process of ensuring user identity to access protected resources
- ATrue
- BFalse
16It is impossible to authorize users through programming
- ATrue
- BFalse
17Ways of programming for user authorization:
- ADeclarative authorization
- BOverride authorization
- CApplication Authorization
- DImperative Authorization
- EExplicit Authorization
18Authorization at enterprise services level is provided through enterprise services (COM+) roles
- ATrue
- BFalse
19Which are the types of roles for SQL server authorization: select 3
- AAdmin-Defined database roles
- BUser-Defined Database roles
- CFixed database roles
- DAPplication roles
- EDynamic database roles
20The integrity and encryption of authentication tickets can be maintained by setting protection ALL in machine.config to impose security
- ATrue
- BFalse
21Do not user SSL to protect authentication cookies over the network
- ATrue
- BFalse
22The authentication cookie should not persist as persisting authentication cookies stores the user credentials
- ATrue
- BFalse
23The absolute path may give direct access to the restricted area of the application
- ATrue
- BFalse
24What method should you use to secure applications from authorization bypass attacks:
- Aserver.transfer()
- Blocal.transfer()
- ChttpResponse.Redirect()
25Cookies should be used to provide authentication or authorization details beyond a session
- ATrue
- BFalse
26This option for storing secrets in asp.net uses the password of the user to derive the key, which then later can be used to perform encryption and decryption data
- ACrypto API
- BCom+ Constructor Strings
- C.Net Cryptography Classes
- DData protection application programming interface (DPAPI)
Information
- Description
- Informática y Comunicaciones Quiz on Preguntas Módulo 3 y 4, created by JuAnRa garcia on 18/02/2017.
- Author
- JuAnRa garcia
- Language
- English
- Views
- 10
- Tags
- Rating
- No ratings yet Rate this quiz