Unit 3 - 2.4.12 Application Attacks Part 2

What is the primary objective of application injection attacks?

• To increase application performance

• To enhance user experience

• To manipulate application behavior and compromise security

• To generate revenue for the attacker

Which of the following is NOT a type of application injection attack?

• SQL Injection (SQLi)

• Buffer Overflow

• Command Injection

• Cross-Site Scripting (XSS)

What does CSRF stand for?

• Client-Side Request Forgery

• Cross-Site Request Forgery

• Cross-Site Scripting Forgery

• Command-Side Request Forgery

How does Cross-Site Scripting (XSS) attack differ from CSRF?

• XSS manipulates XML data, while CSRF manipulates HTML data.

• XSS attacks the server, while CSRF attacks the client.

• XSS involves injecting malicious scripts into web applications, while CSRF impersonates end users to perform actions unknowingly.

• XSS requires authentication credentials, while CSRF does not.

What is the goal of directory traversal attacks?

• To improve file organization

• To access or edit files/folders beyond the intended directory

• To increase server performance

• To enhance system security

Which protocol is targeted in LDAP Injection attacks?

• Lightweight Data Access Protocol (LDAP)

• Lightweight Directory Access Protocol (LDAP)

• Lightweight Application Protocol (LDAP)

• Lightweight Security Protocol (LDAP)

How can security be improved in an application?

• By ignoring user input

• By implementing secure coding practices and input validation

• By removing all input fields from the application

• By increasing the number of vulnerabilities