| |||
|
|
||
|
|||
| |
|
Home > Quiz: Web application threats and vulnerabilities |
| |
|
|
|
|
| Security Quiz: |
|
||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
1.) True or False: It's OK to put sensitive information in HIDDEN form fields; after all, they're hidden.
2.) In what type of attack does an intruder manipulate a URL in such a way that the Web server executes or reveals the contents of a file anywhere on the server, including those lying outside the document root directory?
a. Attackers can use error messages to extract specific information from a system. b. Attackers can use unexpected errors to knock an application off line, creating a denial-of-service attack. c. Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution. d. All of the above. Answer
4.) True or False: The "NO-CACHE" cache-control response header prohibits documents from being stored on the client.
5.) Which of the following is NOT recommended for securing Web applications against authenticated users?
6.) In which of the following exploits does an attacker insert malicious coding into a link that appears to be from a trustworthy source?
7.) True or False: Encrypted data is not at risk by keyloggers.
8.) In which of the following exploits does an attacker add SQL code to a Web form input box to gain access to resources or make changes to data?
9.) Which of the following is characteristic of spyware?
10.) True or False: Web application variables can still be manipulated even when both client and server are using digital certificates to authenticate themselves and establish an SSL connection. How'd you score? 9-10 correct: You're an authority on Web application security 6-8 correct: You're adept in Web application security 3-5 correct: You're a Web application security apprentice 0-2 correct: You're a Web application security amateur
|
|
|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
|||||||||||||||||||||||||||
| |||||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||
