Web Security Threats Quiz

What is Cross-Site Scripting (XSS)?

• A method to inject SQL queries into a database

• A vulnerability that allows attackers to inject malicious scripts into web pages

• A technique to scan networks for open ports

• A method to break authentication mechanisms

Which of the following is a common type of SQL Injection attack?

• Blind SQL Injection

• Cross-Site Request Forgery

• Buffer Overflow

• Man-in-the-Middle

What is the primary purpose of an Nmap scan?

• To inject malicious scripts into web pages

• To scan networks for open ports and services

• To break authentication mechanisms

• To encrypt data in transit

Which of the following is a common consequence of broken authentication?

• Data encryption

• Unauthorised access to user accounts

• Network scanning

• SQL query execution

Which of the following is a preventive measure against Cross-Site Scripting (XSS)?

• Using parameterised queries

• Validating and sanitising user input

• Disabling cookies

• Using a VPN

What does SQL Injection primarily target?

• Web server configurations

• Database queries

• Network firewalls

• User interface design

Which tool is commonly used for network scanning and security auditing?

• Wireshark

• Nmap

• Metasploit

• Burp Suite

What is a common sign of a successful SQL Injection attack?

• Slow network performance

• Display of database error messages

• Increased CPU usage

• Unauthorised file access

Which of the following is a method to prevent SQL Injection?

• Using strong passwords

• Implementing CAPTCHA

• Using parameterised queries

• Disabling JavaScript

What is a common technique used in Cross-Site Scripting (XSS) attacks?

• Buffer overflow

• Script injection

• Port scanning

• Password cracking