Question 1

Match each item with a statement below.
-Ability to vary the information that is displayed on the Web page
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

Dynamic Web pages allow for information to be varied and displayed based on user input or other factors.

Answer: A, D, E
 ASP, PHP, and CGI are all scripting languages that can be used to create dynamic Web pages with varying information.

Answer: C, F
 ODBC and virtual directory are not directly related to varying information on Web pages.

Answer: B, G, J
 SQLi, DAST, and SAST are all related to website security and testing, but not directly related to varying information on Web pages.

Question 2

Match each item with a statement below.
-Displays the same information on the Web page regardless of who accesses the page
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

Static Web pages display the same information regardless of who accesses the page, whereas dynamic Web pages (H) can display different information based on user input or other variables. None of the other options are related to this statement.

Question 3

Match each item with a statement below.
-Standard database access method developed by the SQL Access Group and allows interoperability between back-end DBMSs
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

ODBC (Open Database Connectivity) is the standard database access method developed by the SQL Access Group and allows interoperability between back-end DBMSs.

Note: The other options are not related to database access or interoperability between back-end DBMSs.

Question 4

Match each item with a statement below.
-The attacker supplies SQL commands when prompted to fill in a Web application field
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

SQLi (SQL injection) is a method of exploiting vulnerabilities in Web applications, where the attacker supplies malicious SQL commands into a Web application field, tricking the application into executing unintended commands.

Answer: H
 Dynamic Web pages are generated in real-time by a Web server, often using server-side scripting languages like PHP, ASP, or CGI.

Answer: D
 PHP (Hypertext Preprocessor) is a popular server-side scripting language often used to create dynamic Web pages.

Answer: F
 A virtual directory is a reference to a physical directory on a server that exists outside of the Web application's root directory, allowing the Web application to access files outside of its directory structure.

Answer: J
 SAST (Static Application Security Testing) is a method of testing Web applications for security vulnerabilities without running the application. It involves analyzing the application's source code for known security issues.

Question 5

Match each item with a statement below.
-Analysis of an application's source code for vulnerabilities
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

SAST, or Static Application Security Testing, involves analyzing an application's source code for vulnerabilities before it is compiled and deployed. This matches the description given.

Question 6

Match each item with a statement below.
-The analysis of a running application for vulnerabilities
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

The analysis of a running application for vulnerabilities is best done through Dynamic Application Security Testing (DAST).

Answer: J
 The analysis of code for vulnerabilities is best done through Static Application Security Testing (SAST).

Question 7

Match each item with a statement below.
-A pointer to the physical directory
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

A virtual directory is a pointer to a physical directory on a server, allowing access to its contents without exposing the actual directory structure.

Question 8

Match each item with a statement below.
-Open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

PHP is an open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages.

Answer: H 
 Dynamic Web pages refer to Web pages that are generated on the server and customized based on user input or other factors, allowing for more interactivity and user engagement than static Web pages.

Note: The other items listed are also important concepts and tools related to Web development, but do not directly match the given statement.

Question 9

Match each item with a statement below.
-The interface that determines how a Web server passes data to a Web browser
A)ASP
B)SQLi
C)ODBC
D)PHP
E)CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Accepted Answer

CGI (Common Gateway Interface) is the standard for interfacing external applications with information servers, such as HTTP or web servers. It specifies how data is passed between the web server and the browser, allowing the server to generate dynamic content.

Quiz 10: Hacking Web Servers

Match each item with a statement below. -Ability to vary the information that is displayed on the Web page

Match each item with a statement below. -Displays the same information on the Web page regardless of who accesses the page

Match each item with a statement below. -Standard database access method developed by the SQL Access Group and allows interoperability between back-end DBMSs

Match each item with a statement below. -The attacker supplies SQL commands when prompted to fill in a Web application field

Match each item with a statement below. -Analysis of an application's source code for vulnerabilities

Match each item with a statement below. -The analysis of a running application for vulnerabilities

Match each item with a statement below. -A pointer to the physical directory

Match each item with a statement below. -Open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages

Match each item with a statement below. -The interface that determines how a Web server passes data to a Web browser