Web App Security Quiz 1

HTTP Status Code for "Access is forbidden to the requested page."

• 404

• 504

• 403

• 503

"HTTP is stateless" which means

• The client and server are not aware of each other during a current request. Afterwards, both of them remember each other. Due to the stateless nature of protocol, the client and the server will retain the information about different request across the web pages

• The client and server are aware of each other during a current request only. Afterwards, both of them continue to maintain the information about different request across the web pages

• The client and server are aware of each other during a current request only. Afterwards, both of them forget each other. Due to the stateless nature of protocol, neither the client nor the server can retain the information about different request across the web pages

• It is a connectionless approach in which HTTP client i.e., a browser initiates the HTTP request and after the request is sent the client disconnects from server and waits for the response.

PHP provides mysqli contruct or mysqli_connect() function to open a database connection. This function takes minimum of ................ parameters

• 2

• 3

• 1

• 4

1. <?php  

2. $a;  

3. if ($a)  

4. {  echo "hi";  

5. }  

6. else  {  

7. echo "How are you";  

8. }  

9. ?>  

• 1. Hi How are you

• 1. Hi

• Error

• 1. How are you

Answer explanation

In the given program, the variable $a is uninitialized. So, the if condition will fail, and the echo statement of else block will be printed on screen.

Amazon Lambda is ..................

• Function as a Service

• Backend as a Service

• Server as a Service

• Mathematical Formula as a Service

What is the present version of HTTP

• HTTP/1.1

• HTTP/2

• HTTP/3

• HTTP/4

<script

src="https://code.jquery.com/jquery-3.3.1.slim.min.js"

integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo"

crossorigin="anonymous">

</script>

The above code represents

• HTML sanitization Code

• security-focused encoding library code

• Sub resource integrity Check Code

• JSLint Code

Which of these is Not Correct In Java Script, When the Strict mode is “on”

• Fixes mistakes that make it difficult for JavaScript engines to perform optimizations.

• It throws errors for some errors that were previously kept silent.

• Throws errors when ‘unsafe’ actions are taken

• Accepts the use of reserved words likely to be defined in future versions of ECMAScript.

You can access the cookie using ..................................

• setcookie()

• getcookie()

• accesscookie()

• $_COOKIE

• !isset

For the following Entity Reference problem XML code

<message>salary < 1000</message>

which of the following is the correct format

• <message>salary &lt 1000</message>

• <message>salary &lessthan; 1000</message>

• <message>salary &lt; 1000</message>

• <message>salary <&lt> 1000</message>