W10

Which one is not a way to protect against DNS-based attacks?

• Anycast routing

• Domain lock-up

• DNSSEC

• Over-provisioning infrastructure

What happens when BGP is hijacked?

• Phantom domain attack

• DNS hijacking

• tunneling

• black hole

Which one is not a way to protect against on-path attackers?

• avoiding submitting any sensitive information on any public WiFi network

• implement HTTP Strict Transport Security (HSTS)

• IP prefix filtering

• adopt SSL/TLS

What are common web app security vulnerabilities?

• Memory corruption

• Cross-site request forgery

• hardware corruption

• SQL injection

Which of the following attacks are possible when there is no authentication?

• BGP hijacking

• Brute force attack

• Birthday Attack

• On-path attacks

How can users and networks defend themselves from BGP hijacking?

• Anycast routing

• Over-provisioning infrastructure

• DNS firewall

• IP prefix filtering

How to prevent cross-site scripting?

• Sanitizing data

• Taking cookie security measures

• Using HTTPS

• avoiding HTML in inputs

The following is an example of ....

The code then sends an HTTP request to an attacker’s web server with the stolen cookies in the body of the request.

...... code is typically code that is executed by the web browser after the browser loads a web page.

.........is the release of sensitive or confidential information, and can occur through malicious actions or by mistake.