SBS NAGAR Ethical Hacking Quiz

Code injection is a form of attack in which a malicious user:

• 1. Inserts text into a data field that gets interpreted as code

• 1. Gets the server to execute arbitrary code using a buffer overflow

• 1. Inserts additional code into the JavaScript running in the browser

• 1. Gains access to the codebase on the server and inserts new code

Sid is a judge for a programming contest. Before the code reaches him it goes through arestricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

• 1. Fuzzy-testing the code

  
  

• 1. Third party running the code

• 1. Sandboxing the code

  
  

• 1. String validating the code

Which of the following act requires employer's standard national numbers to identify them onstandard transactions?

• 1. SOXIT

• 1. HIPAA

• 1. DMCA

• 1. PCI-DSS

Which of the following is an NMAP script that could help detect HTTP Methods such as GET,POST, HEAD, PUT, DELETE, TRACE?

• 1. http-git

• 1. http-headers

• 1. http enum

• 1. http-methods

What is the process of logging, recording, and resolving events that take place in anorganization?

• 1. Incident Management Process

• 1. Security Policy

• 1. Internal Procedure

• 1. Metrics