JavaScript Chapter 11 uCertify Test

They are small pieces of information collected by a Web browser to help maintain state and track user activities. They can reside in memory or be placed on a hard drive in the form of a text file.

• HTML entities

• cookies

• brownies

• signed-script

Embedded malicious scrip that appears to be from a trusted site. Upon clicking the link, the embedded script is submitted in the client's HTTP request and can execute on the user's computer, enabling the attacker to steal information.

• frame-to-frame URL change

• infinite loop

• cross-site scripting (XSS)

• zero-day exploit

It is a JavaScript statement that has no attainable conditions for ending, and thus requires the user to close the browser in order to end the script.

• Buzz Lightyear Virus

• cross-site scripting (XSS)

• infinite loop

• same origin

Which JavaScript object is used for client-side browser detection?

• BrowserType

• AppName

• navigator

• UserAgent

What do you understand by an inline frame?

• A frame that displays a separate file floating within a page

• A technique in which one frame in a frameset can direct the URL in another frame to display a different page

• tA frame tha is developed from a plain HTML file without any other application

• A technique used by web applications to prevent their Web pages from being displayed within a frame

In cross-site scripting, the malicious code is generally embedded in:

• the attacker's Web page code.

• an executable file.

• a hyperlink.

• the victim's e-mail application.

Which of the following are based on the Gecko layout engine? (you gotta look this up)

• Mozilla Firefox and Google Chrome

• Mozilla Firefox, SeaMonkey, and Camino

• SeaMonkey, Edge, and Safari

• Safari, Google Chrome, and Camino

Which of the following is a type of code injection attack?

• Cross-site scripting

• Cross-site request forgery

• Session hijacking

• SQL injection

Which of the following is true in relation to security?

• The operating system can be secured but the browser cannot.

• The browser can be secured but the operating system cannot.

• The operating system provides a doorway to the browser for security threats.

• Both the operating system and the browser can be secured with anti-virus software.

Which example demonstrates the proper JavaScript syntax to test for the presence of a cookie?

• confirm(cookie);

• alert(document.cookie);

• window.cookie = "name = value";

• document.cookie = "name = value";