Cybersecurity

A netmask can be represented by which two ways?

• Pound Notation (80.2012.212.50#24) and Decimal Numbers (Netmask: 255.255.255.0)

• Decimal Numbers (Netmask: 255.255.255.0) and Slash Notation (80.212.212.50/32)

• Slash Notation (80.212.212.50/32) and Pound Notation (80.2012.212.50#24)

Which is the broadcast address in this network: 172.16.24.0/24

• 172.16.24.0

• 172.16.24.1

• 172.16.24.255

What is IDOR?

• Invalid Data or Reference

• Insecure Door or Room

• Insecure Direct Object Reference  

What is spoofing?

• Falsifying data, making something appear different than they really are

• A way server hides from attacks, a defensive mechanics

• A way of terminating a 3-way handshake connection

What is Zero-Trust architecture?

• A network where all systems/resources need explicit access to be able to communicate 

• A network where only some resources/devices are trusted

• A network where we do not trust public network(internet), but we trust local network

A cookie can not be used to control a users session/state

• True, only supercookies have this feature

• False. Cookies are often used for tracking sessions  

What is SQL injection?

• It is used in Buffer Overflow attacks to overwrite memory

• It is used to inject malicious code to a database server, through a query

• It is used to spoof or inject false headers in a HTTP request

What is a strobe of data?

• Small amount of traffic trying to hide from detecting

• A sudden increase of traffic in the network  

Using the same strong password, with high entropy, on multiple sites is good practice

• False. If one site is breached/hacked and stores passwords in clear text, your password is now in hackers hands  

• True. Storing passwords in clear text in database is no longer practiced and are now only using strong encryption

What is best practice in defending against SQL injection?

• Sanitizing users input in a web application  

• Blocking specific ports that SQL injections are usually attacked via

• Programmers will not make web applications that allow user input