Question 1

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Developed specifically to allow developers to create dynamically generated HTML content.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Developed...

Question 2

In 2010, OWASP determined that ____ attacks were the top risk to Web applications.

Accepted Answer

In 2010, OWASP identified injection attacks, including SQL, OS, and LDAP injection flaws, as the top risk to Web applications in their OWASP Top 10 report. These attacks allow attackers to send malicious data to an interpreter as part of a command or query, leading to unauthorized data access or loss.

Question 3

During a(n) ____________________ attack, a malicious user sends a flood of e-mail to the e-mail server.

Accepted Answer

The answer of During a(n) ____________________ attack, a malicious user...

Question 4

DNS ____________________ consists of inserting incorrect translation information within the DNS server (or within the communication between the resolver and server) in order to take a legitimate domain name and point the resolver to a malicious server, thereby secretly subverting the session.

Accepted Answer

The answer of DNS ____________________ consists of inserting incorrect translation...

Question 5

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Developed in 1987 by Larry Wall as an interpreted language (based on C syntax) that helps provide a more robust scripting capability for UNIX.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Developed...

Question 6

____________________ queries are initiated by clients to resolve a fully qualified domain name (FQDN)to its IP address.

Accepted Answer

The answer of ____________________ queries are initiated by clients to...

Question 7

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Standardizes the HTML formatting for an entire Web site by allowing developers to customize fonts, tables, and other page elements.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Standardizes...

Question 8

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An API (application programming interface) that allows external programs or scripts to interact with a Web server.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An...

Question 9

____________________ is used to send Internet mail.

Accepted Answer

The answer of ____________________ is used to send Internet mail....

Question 10

What is the best way to direct visitors to a new location or page?

Accepted Answer

Option A is correct because a 301 redirect in a .htaccess file is a server-side method of redirecting users from an old URL to a new URL, which is efficient and SEO-friendly for directing visitors to a new location or page.

Question 11

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An extension to HTML that allows developers to define their own tags for structure.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An...

Question 12

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Used to monitor the status and performance of network devices and systems.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Used...

Question 13

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Designed to facilitate Usenet newsgroup communications.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Designed...

Question 14

What is the best way to make sure data is properly encrypted while in transit?

Accepted Answer

Using the "secure" flag on all sensitive cookies ensures that they are only sent over encrypted connections (HTTPS), which helps in protecting the data while it is in transit.

Question 15

____ was originally developed as a client-side language, which means the code is interpreted on the client side instead of on the Web server.

Accepted Answer

JavaScript was specifically designed to run in a client's browser, allowing for interactive features on web pages without the need for constant communication with the web server.

Question 16

The ____________________ is a set of applications (the software) that runs on top of the Internet.

Accepted Answer

The answer of The ____________________ is a set of applications...

Question 17

____ refers to a new use of existing technologies.

Accepted Answer

AJAX (Asynchronous JavaScript and XML) refers to a new use of existing technologies, combining them to create more dynamic and responsive web applications.

Question 18

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Allows users to connect a remote shell to run programs, view files, and perform a variety of other operations as if they were using the system locally.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-Allows...

Question 19

What is the best way to restrict URL access?

Accepted Answer

Make sure sensitive pages require authentication.

Question 20

Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An attack that exploits a Web site's trust or previous authentication of a user.

Accepted Answer

The answer of Match each item with a statement below.
a.Telnet
f.CGI
b.SNMP
g.Perl
c.NNTP
h.PHP
d.CSS
i.CSRF
e.XML
-An...

Quiz 8: Security of Web Applications

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Developed specifically to allow developers to create dynamically generated HTML content.

In 2010, OWASP determined that ____ attacks were the top risk to Web applications.

During a(n) ____________________ attack, a malicious user sends a flood of e-mail to the e-mail server.

DNS ____________________ consists of inserting incorrect translation information within the DNS server (or within the communication between the resolver and server) in order to take a legitimate domain name and point the resolver to a malicious server, thereby secretly subverting the session.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Developed in 1987 by Larry Wall as an interpreted language (based on C syntax) that helps provide a more robust scripting capability for UNIX.

____________________ queries are initiated by clients to resolve a fully qualified domain name (FQDN)to its IP address.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Standardizes the HTML formatting for an entire Web site by allowing developers to customize fonts, tables, and other page elements.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -An API (application programming interface) that allows external programs or scripts to interact with a Web server.

____________________ is used to send Internet mail.

What is the best way to direct visitors to a new location or page?

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -An extension to HTML that allows developers to define their own tags for structure.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Used to monitor the status and performance of network devices and systems.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Designed to facilitate Usenet newsgroup communications.

What is the best way to make sure data is properly encrypted while in transit?

____ was originally developed as a client-side language, which means the code is interpreted on the client side instead of on the Web server.

The ____________________ is a set of applications (the software) that runs on top of the Internet.

____ refers to a new use of existing technologies.

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -Allows users to connect a remote shell to run programs, view files, and perform a variety of other operations as if they were using the system locally.

What is the best way to restrict URL access?

Match each item with a statement below. a.Telnet f.CGI b.SNMP g.Perl c.NNTP h.PHP d.CSS i.CSRF e.XML -An attack that exploits a Web site's trust or previous authentication of a user.