14.5.4 - Web Server and Network Security Quiz

What is a common target for a denial-of-service (DoS) attack?

• A printer

• A network

• A single computer

• A mobile device

What is the main goal of an application layer DDoS attack?

• To steal data

• To exhaust the target's resources

• To intercept communications

• To modify network protocols

Which attack involves sending a large number of SYN packets with a spoofed IP address?

• Cross-site scripting

• SQL injection

• DNS spoofing

• TCP/IP SYN flood

What is the purpose of a DNS amplification attack?

• To modify SQL databases

• To steal user credentials

• To overload the target with DNS data

• To intercept email communications

What is a SQL injection attack primarily used for?

• To exhaust server resources

• To intercept network traffic

• To gain unauthorized access to data

• To overload network devices

What does a cross-site scripting (XSS) attack exploit?

• Weak passwords

• Open DNS servers

• Improperly configured input fields

• Unpatched software vulnerabilities

In an on-path attack, what can the attacker do?

• Send a large number of HTTP requests

• Modify communications between two devices

• Overload a web server

• Steal browser cookies

What is the best defense against an online brute force attack?

• Using long passphrases

• Implementing lock out policies

• Encrypting data

• Using a firewall

What is a characteristic of a zero-day attack?

• It exploits a known vulnerability

• It uses a list of common passwords

• It targets a vulnerability unknown to the developer

• It requires multiple computers

What is the main focus of a dictionary attack?

• Overloading a server with requests

• Modifying SQL databases

• Intercepting network traffic

• Using a list of words and phrases to guess passwords