Cybersecurity Final Review FALL24

Front

What is SQL Injection?

Back

A vulnerability where users inject malicious code into SQL statements.

Front

How does a Next-Generation Firewall (NGFW) enhance security compared to first-generation firewalls?

Back

By performing deep-packet inspection and application-level analysis

Front

Which of the following is a key feature of prepared statements in SQL? Options: They merge code and data for faster processing, They parse and execute SQL statements without optimization, They separate data and code to prevent injection attacks, They allow unrestricted user input for dynamic queries

Back

They separate data and code to prevent injection attacks

Front

What is the vulnerability in the following code? Options: e.preventDefault(), innerHTML, document.getElementById(), None of the above

Back

innerHTML

Front

What is the key difference between HTTP and HTTPS?

Back

HTTPS is encrypted and secured using digital certificates, while HTTP is not.

Front

What is the primary purpose of Nmap?

Back

To scan and analyze networks for hosts and services

Front

What is one of the fundamental causes of several types of vulnerabilities and attacks? Options: Validating input from users, Separating code and data, Mixing code and data together, Using localStorage instead of sessions

Back

Mixing code and data together

Front

Which of the following is an effective countermeasure against SQL Injection?
Options:
Using SELECT * in queries,
Allowing direct user input in SQL statements,
Disabling database logs,
Filtering and encoding user input

Back

Filtering and encoding user input

Front

What type of attack is the following code vulnerable to?

Back

SQL Injection Attack

Front

In SQL, what does the # character signify?

Back

It denotes a comment until the end of the line