Cyber 2.3.1 - Securing eCommerce

What is the primary function of a client-server architecture?

• Execute SQL commands

• Manage data efficiently

• Request information from a server

• Store digital data in a relational database

Which type of exploit inserts malicious client-side code into a website?

• Cross-site Scripting (XSS)

• SQL Injection

• Data Cleansing

• Relational database

How do security professionals protect against Cross-Site Scripting (XSS) exploits?

• By adding security mearsures that recognize and delete SQL special characters

• By ensuring proper data cleansing techniques are in place

• by executing SQL code to steal or modify data

• By organizing data into collections of similar data

What does SQL Stand for?

• Scripted Query Language

• Secure Query Language

• Structured Query Language

• Simple Query Language

Which type of exploit uses query based code to steal or modify data residing in a database?

• Cross-site Scripting (XSS)

• Data Cleansing

• SQL Injection

• Relational Database management

How do websites protect against SQL injection exploits?

• By recognizing and treating SQL special characters as plain text or deleting them

• By adding security measures that recognize and delete JavaScript code

• By organizing data into collections of similar data

• By executing SQL code to manage digital data

What is the primary role of the server in a client-based architecture?

• Execute SQL Commands

• Manage data efficiently

• Protect against SQL injection exploits

• Fulfill client requests for information

What is the purpose of the '<script' tag in HTML?

• It encloses all the objects that the browser interprets

• It marks the opening of an HTML document

• It encloses JavaScript code that is executed first

• It marks the closing of the HTML document

What is the primary function of relational databases?

• To execute SQL commands

• To manage data efficently

• To store digital data in a relational database

• To protect against SQL injection exploits

What behaviour is exhibited by data cleansing techniques in web security?

• Recognizing and treating scripting tags entered by a user as plain text or deleting them

• Deleting all user input completly

• Recognizing and treating SQL special characters entered by a user as plain text or deleting them

• Executing JavaScript code to manipulate user input