Web Basics and OWASP Top 10 Worksheet

Which of the following protocols is used to securely transmit web pages over the internet?

• HTTP

• FTP

• HTTPS

• SMTP

Cookies are used by web servers to store information on the client side.

• True

• False

What does the acronym URL stand for?

• Uniform Resource Locator

• Unique Resource Link

• Universal Record Language

• User Referenced Link

Which language is most commonly used to add interactivity to web pages in the browser?

• Java

• PHP

• JavaScript

• SQL

Which of the following is a common security risk identified by the OWASP Top 10?

• Broken Access Control

• Poor UI Design

• Excessive Logging

• Incomplete Documentation

Which OWASP category deals with exposing sensitive data such as passwords or credit card numbers?

• Broken Authentication

• Security Misconfiguration

• Cryptographic Failures

• Insecure Design

What is the best defense against injection attacks, including SQL Injection?

• Input validation

• Parameterized queries (prepared statements)

• Disabling user input

• Using strong passwords

Which OWASP principle involves ensuring that users cannot access data or functions they shouldn’t be allowed to?

• Injection

• Security Logging

• Broken Access Control

• XML External Entities

What does SQL stand for?

• Standard Query List

• Structured Query Language

• Server Query Language

• System Queue Language

SQL Injection occurs when user input is inserted into a database query without proper validation.

• True

• False