What is an injection attack?

• A way to enhance user experience

• A technique to exploit vulnerabilities in web applications

• A process to secure web applications

• A method to improve web application performance

Which type of injection is known as CWE-79?

• SQL Injection

• Cross-site Scripting

• Path Traversal

• External File Name Control

What is a characteristic of Reflected XSS?

• It does not involve user interaction

• It is a type of SQL injection

• Malicious code is executed when a user clicks a crafted link

• Malicious code is stored on the server

How can you prevent XSS attacks?

• Allow all user input

• Ignore user input

• Use outdated libraries

• Escape special characters in output

What is a common type of SQL injection?

• Reflected XSS

• Persistent XSS

• Blind SQL Injection

• Stored XSS

What does Time-based Blind SQL Injection rely on?

• Deducing information based on response time

• Executing commands without any response

• Directly returning SQL query results

• Using user input for file paths

What is a method to prevent SQL injections?

• Use only basic SQL commands

• Ignore database permissions

• Allow all types of user input

• Train developers on security best practices

What is Directory Traversal?

• A way to store files in the database

• A technique to enhance web application security

• A vulnerability that allows access to files outside allowed directories

• A method to improve file access speed