CompTIA Security+ ExamCompass Practice Quiz - Tricky/Hard

Which of the following is used in data URL phishing?

• Prepending

• Typosquatting

• Pretexting

• Domain hijacking

Which of the following answers can be used to describe characteristics of a cross-site scripting attack? (Select 3 answers)

• User's browser executes attacker's script

• Exploits the trust a website has in the user's web browser

• Website executes attacker's requests

• A malicious script is injected into a trusted website

• Exploits the trust a user's web browser has in a website

Which of the following fragments of input might indicate an LDAP injection attack attempt? (Select 2 answers)

• ... AND password = " OR '1' = '1';

• administrator)(&))

• ... <script> malicious script code </script>

• search.aspx?name=userName) (zone=*)

• ... p@$$w0rd</password></user><user><name>attacker</name>

Which of the following fragments of input might indicate an XML injection attack attempt?

• 
  ... <script> malicious script code </script>

• search.aspx?name=userName)(zone=*)

• 
  ... p@$$w0rd</password></user><user><name>attacker</name>

• administrator) (&)) AND password = " OR '1' = '1';

• 
  ... AND password = " OR '1' = '1';

A situation in which an application writes to an area of memory it is not supposed to have access to is referred to as:

• DLL injection

• Buffer overflow

• Memory leak

• Integer overflow

Which of the following answers can be used to describe characteristics of a cross-site request forgery attack? (Select 3 answers)

• Exploits the trust a user's web browser has in a website

• A user is tricked by an attacker into submitting unauthorized web requests

• Exploits the trust a website has in the user's web browser

• Website executes attacker's requests

• User's browser executes attacker's script

A measure of the likelihood that a biometric security system will incorrectly accept an access attempt by an unauthorized user is known as:

• CRC

• FAR

• CER

• FRR

A measure of the likelihood that a biometric security system will incorrectly reject an access attempt by an authorized user is referred to as:

• FAR

• CER

• CRC

• FRR

Which of the answers listed below refers to a type of metric used for evaluation of a biometric security system's accuracy?

• FRR

• CRC

• FAR

• CER

Which of the following answers refers to a solution designed to strengthen the security of session keys?

• ECB

• PFS

• EFS

• PFX