Cyber Thursday- S2 - Broken Authentication 11/23/23

"ILoveFootball" is a strong password

• True

• False

Choose an attack technique that forces a user's session credential or session ID to an explicit value.

• Session Fixation

• Brute Force Attack

• Cross Site Scripting

• Dictionary Attack

Broken Authentication vulnerability can be prevented by: [Multiple Choice]

• Implement password strength restriction

• Use predictable session ID

• Invalidate session post logout

• Restrict Internal URL to authenticated users only

Implementation of password strength check at client side only is enough to prevent broken authentication

• True

• False

What is the use of cookie secure attribute ?

• Ensures the cookie is passed over a HTTPS connection

• Ensures client side scripts cannot access cookies

• Enforces TLS encryptions

• Allows passage of cookie via URL

Which of the following is an example of a session management vulnerability ?

• Cross-Site Scripting(XSS)

• Cross-Site Request Forgery

• Session Fixation

• SQL Injection

How does Multifactor Authentication enhance security ?

• By using multiple programming languages

• By requiring two or more forms of identification

• By Encrypting Session Data

• By using compex passwords

What type of attack involves trying a small number of commonly used passwords against many accounts ?

• Brute force attack

• Cross-Site Scripting (XSS)

• SQL Injection

• Password spraying

How do Session timeouts contribute to authentication security ?

• By encrypting session data

• By limiting the duration of a user's session

• By using MFA

• By locking user accounts after failed attempts