Question 1

Which JavaScript function is a "method" or sequence of statements that perform a routine or task?
A) getElementById()
B) document.write()
C) CFLOCATION()

Accepted Answer

getElementById() is a method that returns the element with the specified ID.

Question 2

Web applications written in CFML can also contain other client-side technologies,such as HTML and JavaScript.

Accepted Answer

CFML web applications can include other client-side technologies such as HTML and JavaScript to enhance the user interface and functionality.

Question 3

OLE DB relies on connection strings that enable the application to access the data stored on an external device.

Accepted Answer

This statement is true. """
OLE DB relies on connection strings that enable the application to access the data stored on an external device."""

Question 4

Adobe System's ColdFusion uses its proprietary tags,which are written in which of the following languages?
A) XML
B) DHTML
C) PHP
D) CFML

Accepted Answer

Adobe System's ColdFusion uses its proprietary tags, which are written in CFML (ColdFusion Markup Language), not XML, DHTML, or PHP. CFML is a scripting language used for rapid web application development.

Question 5

CGI programs can be written in many different programming and scripting languages,such as C/C++,Perl,UNIX shells,Visual Basic,and FORTRAN.

Accepted Answer

CGI programs can indeed be written in various programming and scripting languages, including C/C++, Perl, UNIX shells, Visual Basic, and FORTRAN.

Question 6

Visual Basic Script (VBScript)is a scripting language developed by which of the following companies?
A) Sun Microsystems
B) Symantec
C) Macromedia
D) Microsoft

Accepted Answer

VBScript was developed by Microsoft as a scripting language for Microsoft Windows. It is commonly used for programming web applications and is similar to JavaScript in syntax and functionality.

Question 7

Which of the following interfaces,developed by Microsoft,is a set of interfaces that enable applications to access data stored in a database management system (DBMS)?
A) OLE DB
B) ODBC
C) ADO
D) JDBC

Accepted Answer

OLE DB (Object Linking and Embedding Database) is a set of interfaces that allows applications to access data stored in a variety of relational, object-oriented, and non-relational databases. ODBC (Open Database Connectivity) is a similar interface, but is not exclusive to Microsoft and is designed to be platform-independent. ADO (ActiveX Data Objects) is an object-oriented interface that builds on top of OLE DB and is optimized for working with SQL Server databases on Windows platforms. JDBC (Java Database Connectivity) is a Java API for connecting to relational databases.

Question 8

To check whether a CGI program works,you can test the URL in your Web browser.Which of the following directories should you save the program to on your Web server before you check the URL in your Web browser?
A) bin
B) cgi-bin
C) cgi
D) scripts

Accepted Answer

The CGI program should be saved in the cgi-bin directory on your Web server. This is because the cgi-bin directory is specifically designated for CGI scripts to be executed by the server. The other directories listed (bin, cgi, and scripts) are not typically used for CGI scripts and may not be configured to properly execute them.

Question 9

Which of the following interfaces is a standard database access method,developed by SQL Access Group,that allows an application to access data stored in a database management system (DBMS)?
A) OLE DB
B) ODBC
C) ADO
D) JDBC

Accepted Answer

ODBC (Open Database Connectivity) is a standard database access method for accessing data stored in a DBMS. It was developed by SQL Access Group and provides a standard API for accessing relational database management systems (RDBMS). OLE DB is a Microsoft technology for data access and ADO (ActiveX Data Objects) is a Microsoft technology for accessing data from multiple sources, including databases. JDBC (Java Database Connectivity) is a Java API for connecting to a database.

Question 10

Which of the following is an alternative term used when referring to Application Security?
A) SecAPP
B) Apps
C) AppSec
D) SQLSec

Accepted Answer

AppSec is the commonly used alternative term for Application Security. The other options (A, B, D) are not widely used or recognized in the industry.

Question 11

Which of the following cross-site scripting vulnerabilities types relies on social engineering to trick a user into visiting a maliciously crafted link or URL?
A) reflected
B) injected
C) unvalidated
D) Stored

Accepted Answer

Reflected cross-site scripting vulnerabilities rely on social engineering to trick a user into visiting a maliciously crafted link or URL. The attacker includes a malicious script in the link or URL, which is then reflected back to the user's browser, potentially allowing the attacker to steal sensitive information or perform other malicious actions. Injected and stored cross-site scripting vulnerabilities involve inserting malicious code directly into a webpage or web application, while unvalidated cross-site scripting vulnerabilities occur when user input is not properly sanitized before being displayed on a webpage.

Question 12

JavaScript is a server-side scripting language that is embedded in an HTML Web page.

Accepted Answer

JavaScript is a client-side scripting language that is used to make dynamic interactions on a webpage. It is written within the HTML code but is executed on the user's browser, not the server.

Question 13

Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications,such as Word or Excel,to interact with the Web?
A) ADOSQL
B) ADO
C) SQL
D) SNAOLEDB

Accepted Answer

ADO (ActiveX Data Objects) is a programming interface that allows a developer to connect a Web application to a database. It also includes technologies that enable applications like Word or Excel to interact with the Web. ADOSQL and SQL are specific programming languages related to querying databases, while SNAOLEDB is a technology related to connectivity between different data sources.

Question 14

Which of the following is the interface that determines how a Web server passes data to a Web browser?
A) Perl
B) ASP
C) CGI
D) PHP

Accepted Answer

CGI (Common Gateway Interface) is the interface that determines how a Web server passes data to a Web browser. Perl, ASP, and PHP are all programming languages that can be used with CGI to create dynamic web pages, but they are not interfaces.

Question 15

A user can view the source code of a PHP file by using their Web browser's tools.

Accepted Answer

A user cannot view the source code of a PHP file using their Web browser's tools as PHP code is processed on the server-side before being sent to the client's Web browser. The client only sees the output produced by the PHP code, not the code itself.

Question 16

Which of the following programming languages was originally used primarily on UNIX systems,but is used more widely now on many platforms,such as Macintosh and Windows?
A) HTML
B) JScript
C) VBScript
D) PHP

Accepted Answer

PHP was originally developed for UNIX systems, but it is now used widely on many platforms, including Macintosh and Windows. HTML is not a programming language but a markup language, and JScript and VBScript are primarily used for web development on Windows platforms.

Question 17

Connecting to an MS SQL Server database with Microsoft's Object Linking and Embedding Database (OLE DB)requires using which of the following providers?
A) ADSDSOOBJECT
B) MySQLProv
C) SQLOLEDB
D) SNAOLEDB

Accepted Answer

The SQLOLEDB provider is specifically designed for connecting to Microsoft SQL Server databases using OLE DB. The other options are for different databases or technologies and would not be compatible with MS SQL Server.

Question 18

Which of the following resources is an excellent starting point for security professionals when investigating VBScript vulnerabilities?
A) CVE Web site
B) CERT
C) Microsoft Security Bulletin
D) Macromedia security

Accepted Answer

The Microsoft Security Bulletin is the best starting point for investigating VBScript vulnerabilities as it provides information on patches and workarounds for known vulnerabilities in Microsoft products, including VBScript. The CVE Web site provides information on vulnerabilities, but it may not have detailed information on VBScript specifically. CERT and Macromedia security do not have a specific focus on VBScript vulnerabilities.

Question 19

Which of the following does Object Linking and Embedding Database (OLE DB)rely on that allows an application to access data stored on an external device?
A) connection strings
B) program strings
C) SQL strings
D) string interfaces

Accepted Answer

OLE DB relies on connection strings to establish a connection between an application and an external data source such as a database. In contrast, program strings and SQL strings are used to execute specific commands or queries within the context of the data source, and string interfaces refer to the means by which data is passed between OLE DB components.

Question 20

Which specific type of tag do All CFML tags begin with?
A) #
B) CF
C) CFML
D) %

Accepted Answer

All CFML tags begin with "CF".

Quiz 10: Hacking Web Servers

Which JavaScript function is a "method" or sequence of statements that perform a routine or task?

Web applications written in CFML can also contain other client-side technologies,such as HTML and JavaScript.

OLE DB relies on connection strings that enable the application to access the data stored on an external device.

Adobe System's ColdFusion uses its proprietary tags,which are written in which of the following languages?

CGI programs can be written in many different programming and scripting languages,such as C/C++,Perl,UNIX shells,Visual Basic,and FORTRAN.

Visual Basic Script (VBScript) is a scripting language developed by which of the following companies?

Which of the following interfaces,developed by Microsoft,is a set of interfaces that enable applications to access data stored in a database management system (DBMS) ?

To check whether a CGI program works,you can test the URL in your Web browser.Which of the following directories should you save the program to on your Web server before you check the URL in your Web browser?

Which of the following interfaces is a standard database access method,developed by SQL Access Group,that allows an application to access data stored in a database management system (DBMS) ?

Which of the following is an alternative term used when referring to Application Security?

Which of the following cross-site scripting vulnerabilities types relies on social engineering to trick a user into visiting a maliciously crafted link or URL?

JavaScript is a server-side scripting language that is embedded in an HTML Web page.

Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications,such as Word or Excel,to interact with the Web?

Which of the following is the interface that determines how a Web server passes data to a Web browser?

A user can view the source code of a PHP file by using their Web browser's tools.

Which of the following programming languages was originally used primarily on UNIX systems,but is used more widely now on many platforms,such as Macintosh and Windows?

Connecting to an MS SQL Server database with Microsoft's Object Linking and Embedding Database (OLE DB) requires using which of the following providers?

Which of the following resources is an excellent starting point for security professionals when investigating VBScript vulnerabilities?

Which of the following does Object Linking and Embedding Database (OLE DB) rely on that allows an application to access data stored on an external device?

Which specific type of tag do All CFML tags begin with?