Sec Study Quiz 5

Which of the following is NOT a type of attack listed in the network diagram section?

• SQL Injection

• Cross Site Scripting

• XML Injection

• Phishing

Answer explanation

The correct choice is Phishing because it is NOT a type of attack listed in the network diagram section.

What is the purpose of the anonymizer in the network diagram?

• To protect the web server

• To hide the attacker's identity

• To filter out malicious traffic

• To store application source code

Answer explanation

The purpose of the anonymizer in the network diagram is to hide the attacker's identity, not to protect the web server, filter out malicious traffic, or store application source code.

According to the network diagram, where is the application source code repository located?

• On the CRM server

• On the attacker's tablet

• Behind the firewall

• Within the web server

Answer explanation

The application source code repository is located behind the firewall, as shown in the network diagram.

What device is directly connected to the internet in the network diagram?

• Router

• Switch A

• Firewall

• CRM Server

Answer explanation

The Firewall is directly connected to the internet in the network diagram as it acts as a barrier between the internal network and the internet, controlling incoming and outgoing traffic.

What is the function of the WAF in the context of the network diagram?

• Web Application Firewall to protect against web-based attacks

• Wide Area Filesystem for file sharing

• Wireless Access Facility for network access

• Workstation Application Function for desktop applications

Answer explanation

The function of the WAF in the context of the network diagram is to act as a Web Application Firewall to protect against web-based attacks.

Which type of attack is NOT listed in the 'Select type of attack' section?

• SQL Injection

• Cross Site Scripting

• Phishing

• Session Hijacking

Answer explanation

The correct choice is Phishing because it is NOT listed in the 'Select type of attack' section.

What is placed between the Internet and Switch A to protect the network?

• Anonymizer

• Firewall

• Router

• Web Server

Answer explanation

A firewall is placed between the Internet and Switch A to protect the network by monitoring and controlling incoming and outgoing network traffic based on predetermined security rules.

Which security measure is shown directly connected to the Database in the diagram?

• WAF

• Input Validation

• URL Filtering

• Code Review

Answer explanation

The security measure directly connected to the Database in the diagram is Input Validation, as it is shown as the immediate layer of defense for the Database.

What is implemented at the Web Server for security as per the diagram?

• URL Filtering

• Input Validation

• Record level access control

• Code Review

Answer explanation

URL Filtering is implemented at the Web Server for security as per the diagram, allowing control over the URLs accessed by users.

According to the diagram, what type of control is implemented on the CRM Server?

• WAF

• Input Validation

• Record level access control

• URL Filtering

Answer explanation

The correct type of control implemented on the CRM Server is record level access control, as shown in the diagram.