Web Security Quiz

Which of the following is a type of SQL Injection?

• DOM-Based

• Reflected

• Time-Based

• CSRF

What does XSS stand for?

• XML Site Scripting

• Cross-Site Scripting

• Extra Site Security

• Extended Server Security

Which XSS type stores the malicious script in a database?

• Reflected

• DOM-Based

• Stored

• Remote

Which of the following payloads is used in a Path Traversal attack?

• ../../../../etc/passwd

• SELECT * FROM users

• {{7*7}}

What IP is commonly used to exploit SSRF in cloud services?

• 192.168.1.1

• 169.254.169.254

• 10.0.0.1

• 127.0.0.53

In SSTI, which of the following is a common vulnerable template engine?

• Jinja2

• Apache

• Flask

• Spring

What does IDOR stand for?

• Internal Data Overwrite Request

• Index Data Object Resolver

• Insecure Direct Object Reference

• Internal Direct Output Response

Which XSS type involves modifying JavaScript at the client side?

• Stored

• Reflected

• DOM-Based

• Inline

What is the result of the SSTI payload `{{7*7}}` in Jinja2?

• 14

• 49

• 77

• Error

Which method helps prevent SQL Injection?

• Prepared statements

• Using innerHTML

• Admin access

• Base64 encoding