Deck 13: Programming Exploits

Question 1

During the early days of the Internet, most Web pages were static HTML, so programming exploits could only be aimed at the client-side browsers.

Answer 1

True

Question 2

The design flaw in ActiveX is that ActiveX can do anything the user can do.

Answer 2

True

Question 3

The COM architecture was first released with Windows XP.

Answer 3

False

Question 4

One of the least common exploits used on the Internet is a buffer overflow.

Question 5

HTML is a dynamic language, and can be executed successfully outside a Web browser.

Question 6

____ controls are stand-alone compiled applications designed to make it possible to link and allow interactions between variously developed applications.

A)ActiveX
B)Applets
C)Java widgets
D)VBScript

Question 7

Up until ____, when Microsoft issued the patch that disables autoplay of ActiveX controls, ActiveX was becoming a widespread way to perform surreptitious installation of spyware and adware on Windows machines.

A)2000
B)2001
C)2003
D)2006

Question 8

The ____ vulnerability exploits an unchecked buffer in Internet Explorer processing HTML elements such as FRAME and IFRAME elements.

A)phishing
B)buffer overflow
C)HTML e-mail
D)remote access

Question 9

Secure transfer of data has been made available by protocols such as ____.

A)FTP
B)HTTP
C)SSL
D)TCP

Question 10

SSL encrypts the session, as well as the data that is being used in the session, using ____.

A)PKI
B)VPN
C)TLS
D)HTTPS

Question 11

_________________________ are the defects in various programming languages that are used to develop server-side and client-side applications.

Question 12

____________________ controls are Component Object Model (COM) objects that can be embedded in a variety of applications.

Question 13

____________________, Microsoft's answer to Netscape's JavaScript language, is loosely based on the Visual Basic programming language, but is much simpler.

Question 14

______________________________ is the most basic script used to develop Web pages and uses a set of markup tags, such as , to define the structure of Web pages.

Question 15

Java is designed to run in a platform-independent manner using _________________________ installed on the client computer as its sandbox.

Question 16

What is the difference between a script and a programming language?

Question 17

How can attackers use ActiveX to modify resources on an implementation of Windows?

Question 18

What security measures regarding ActiveX should you take if you are running Windows 2000 or Windows XP?