Identifying and Fixing Vulnerabilities

What is SQL Injection (SQLi)?

• A type of vulnerability that allows attackers to alter database queries.

• A method of encrypting sensitive data.

• A tool for scanning web applications.

• A feature to validate user inputs.

Which tool is commonly used to detect vulnerabilities in web applications?

• Firewall

• OWASP ZAP

• Antivirus Software

• VPN

What does OWASP ZAP do when set up as a proxy?

• Encrypts all user data.

• Analyzes traffic between the browser and the application.

• Automatically fixes vulnerabilities.

• Blocks malicious scripts.

What is a key step in fixing SQL Injection vulnerabilities?

• Using encrypted email communication.

• Writing user input directly into the SQL query.

• Ignoring invalid inputs.

• Implementing parameterized queries.

Which of these is an example of insecure practices?

• Using parameterized queries for SQL commands.

• Using regular expressions for input validation.

• Writing passwords in plain text files.

OWASP ZAP is only suitable for advanced cybersecurity professionals.

• True

• False

Data validation prevents malicious scripts from being submitted through web forms.

• True

• False

Cross-Site Scripting (XSS) allows attackers to manipulate SQL queries.

• True

• False

Regularly updating tools and techniques is a best practice to reduce cybersecurity risks.

• True

• False

OWASP ZAP provides recommendations to fix detected vulnerabilities.

• True

• False