Question 1

Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.

Accepted Answer

A) True 
 B)False

Question 2

Describe a cross-site scripting (XSS) attack.

Accepted Answer

Unlike other Web application attacks, a ...

Question 3

When DNS servers exchange information among themselves it is known as a ____.

Accepted Answer

A)   resource request
B)   zone disarticulation
C)   zone transfer
D)   zone removalE) A) and B)
F) A) and C)

Question 4

List three of the most common Web application attacks.

Accepted Answer

The most common Web applicatio...

Question 5

The expression ____ up one directory level.

Accepted Answer

A)   ;/traverses
B)  ./traverses
C)   %20/traverses
D)  ../ traversesE) A) and B)
F) A) and C)

Question 6

Describe the two types of privilege escalation.

Accepted Answer

There are two types of privilege escalat...

Question 7

Match between columns
                        Premises: Created from the Web site that a user is currently viewing
Privileges that are granted to users to access hardware and software resources
Exploits previously unknown vulnerabilities so victims have no time to prepare or defend against the attacks.
Takes advantage of vulnerability in the Web application program or the Web server software so that a user can move from the root directory to other restricted directories
Targets vulnerabilities in client applications that interact with a compromised server or process malicious data
The ability to move to another directory could allow an unauthorized user to view confidential files or even enter commands to execute on a server
An attack involving using a third party to gain access rights.
Injects scripts into a Web application server that will then direct attacks at clients
Exploiting a vulnerability in software to gain access to resources that the user would normally be restricted from obtaining

Accepted Answer

The Answer of Cross-site scripting (XSS) attack and Zero day is...

Question 8

Because the XSS is a widely known attack, the number of Web sites that are vulnerable is very small.

Accepted Answer

A) True 
 B)False

Question 9

A ____ attack is similar to a passive man-in-the-middle attack.

Accepted Answer

A)   replay
B)   hijacking
C)   denial
D)   buffer overflowE) A) and B)
F) B) and D) A

Question 10

A client-side attack that results in a user's computer becoming compromised just by viewing a Web page and not even clicking any content is known as a ____.

Accepted Answer

A)   buffer overflow
B)   drive-by-download
C)   denial of service
D)   stack underflowE) A) and D)
F) B) and C) B

Question 11

Web application attacks are considered ____ attacks.

Accepted Answer

A)   client-side
B)   hybrid
C)   server-side.
D)   relationshipE) A) and B)
F) A) and C)

Question 12

Describe how to harden a Web server.

Accepted Answer

Enhancing the security of the Web server...

Question 13

HTML is a markup language that uses specific ____ embedded in brackets.

Accepted Answer

A)   blocks
B)   marks
C)   taps
D)   tagsE) A) and C)
F) A) and B) D

Question 14

Describe a drive-by-download attack.

Accepted Answer

Attackers first identify a vulnerable We...

Question 15

ARP poisoning is successful because there are few authentication procedures to verify ARP requests and replies.

Accepted Answer

A) True 
 B)False

Question 16

Users who access a Web server are usually restricted to the ____ directory.

Accepted Answer

A)   top
B)   base
C)   root
D)   tapE) B) and D)
F) A) and C)

Question 17

Because of the minor role it plays, DNS is never the focus of attacks.

Accepted Answer

A) True 
 B)False

Question 18

The SQL injection statement ____ discovers the name of a table.

Accepted Answer

A)   whatever%20 AND 1=(SELECT COUNT(*)  FROM tabname) ; --
B)   whatever' AND 1=(SELECT COUNT(*)  FROM tabname) ; --
C)   whatever; AND 1=(SELECT COUNT(*)  FROM tabname) ; --
D)   whatever%; AND 1=(SELECT COUNT(*)  FROM tabname) ; --E) A) and C)
F) A) and B)

Question 19

Describe the differences between XML and HTML.

Accepted Answer

There are several significant difference...

Question 20

____ is designed to display data, with the primary focus on how the data looks.

Accepted Answer

A)   XML
B)   HTML
C)   SGML
D)   ISLE) B) and C)
F) None of the above

Exam 3: Application and Network Attacks

Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.

Correct Answer
verified

Describe a cross-site scripting (XSS) attack.

Correct Answer
verified
Unlike other Web application attacks, a ...
View Answer

When DNS servers exchange information among themselves it is known as a ____.

Correct Answer
verified

List three of the most common Web application attacks.

Correct Answer
verified
The most common Web applicatio...
View Answer

The expression ____ up one directory level.

Correct Answer
verified

Describe the two types of privilege escalation.

Correct Answer
verified
There are two types of privilege escalat...
View Answer

Match each term with the correct statement below.

Because the XSS is a widely known attack, the number of Web sites that are vulnerable is very small.

Correct Answer
verified

A ____ attack is similar to a passive man-in-the-middle attack.

Correct Answer
verified
A

A client-side attack that results in a user's computer becoming compromised just by viewing a Web page and not even clicking any content is known as a ____.

Correct Answer
verified
B

Web application attacks are considered ____ attacks.

Correct Answer
verified

Describe how to harden a Web server.

Correct Answer
verified
Enhancing the security of the Web server...
View Answer

HTML is a markup language that uses specific ____ embedded in brackets.

Correct Answer
verified
D

Describe a drive-by-download attack.

Correct Answer
verified
Attackers first identify a vulnerable We...
View Answer

ARP poisoning is successful because there are few authentication procedures to verify ARP requests and replies.

Correct Answer
verified

Users who access a Web server are usually restricted to the ____ directory.

Correct Answer
verified

Because of the minor role it plays, DNS is never the focus of attacks.

Correct Answer
verified

The SQL injection statement ____ discovers the name of a table.

Correct Answer
verified

Describe the differences between XML and HTML.

Correct Answer
verified
There are several significant difference...
View Answer

____ is designed to display data, with the primary focus on how the data looks.

Correct Answer
verified

Exam 3: Application and Network Attacks

Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.

Correct AnswerverifiedShow Answer

Describe a cross-site scripting (XSS) attack.

Correct AnswerverifiedUnlike other Web application attacks, a ...View AnswerShow Answer

When DNS servers exchange information among themselves it is known as a ____.

Correct AnswerverifiedShow Answer

List three of the most common Web application attacks.

Correct AnswerverifiedThe most common Web applicatio...View AnswerShow Answer

The expression ____ up one directory level.

Correct AnswerverifiedShow Answer

Describe the two types of privilege escalation.

Correct AnswerverifiedThere are two types of privilege escalat...View AnswerShow Answer

Match each term with the correct statement below.

Because the XSS is a widely known attack, the number of Web sites that are vulnerable is very small.

Correct AnswerverifiedShow Answer

A ____ attack is similar to a passive man-in-the-middle attack.

Correct AnswerverifiedA

A client-side attack that results in a user's computer becoming compromised just by viewing a Web page and not even clicking any content is known as a ____.

Correct AnswerverifiedB

Web application attacks are considered ____ attacks.

Correct AnswerverifiedShow Answer

Describe how to harden a Web server.

Correct AnswerverifiedEnhancing the security of the Web server...View AnswerShow Answer

HTML is a markup language that uses specific ____ embedded in brackets.

Correct AnswerverifiedD

Describe a drive-by-download attack.

Correct AnswerverifiedAttackers first identify a vulnerable We...View AnswerShow Answer

ARP poisoning is successful because there are few authentication procedures to verify ARP requests and replies.

Correct AnswerverifiedShow Answer

Users who access a Web server are usually restricted to the ____ directory.

Correct AnswerverifiedShow Answer

Because of the minor role it plays, DNS is never the focus of attacks.

Correct AnswerverifiedShow Answer

The SQL injection statement ____ discovers the name of a table.

Correct AnswerverifiedShow Answer

Describe the differences between XML and HTML.

Correct AnswerverifiedThere are several significant difference...View AnswerShow Answer

____ is designed to display data, with the primary focus on how the data looks.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
Unlike other Web application attacks, a ...
View Answer

Correct Answer
verified

Correct Answer
verified
The most common Web applicatio...
View Answer

Correct Answer
verified

Correct Answer
verified
There are two types of privilege escalat...
View Answer

Correct Answer
verified

Correct Answer
verified
A

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified
Enhancing the security of the Web server...
View Answer

Correct Answer
verified
D

Correct Answer
verified
Attackers first identify a vulnerable We...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
There are several significant difference...
View Answer

Correct Answer
verified