Network and Security

Which of the following vulnerabilities allows an attacker to manipulate a web application's database query?

• A) Cross-Site Scripting (XSS)
• B) SQL Injection
• C) Insecure Cookies
• D) Cross-Site Request Forgery (CSRF)

What is a common consequence of Cross-Site Scripting (XSS) attacks?

• A) Unauthorized access to a user's account
• B) Data loss in the database
• C) Denial of service to the web application
• D) Server configuration exposure

Which security measure can help protect a web application from SQL injection attacks?

• A) Input validation
• B) Session management
• C) Cookie expiration
• D) Data encryption

What role do insecure cookies play in web application vulnerabilities?

• A) They can store user preferences securely.
• B) They can be intercepted by attackers to hijack sessions.
• C) They enhance the performance of the web application.
• D) They are a form of encryption for sensitive data.

Which of the following is an effective method for preventing Cross-Site Request Forgery (CSRF) attacks?

• A) Using unique tokens for each request
• B) Disabling JavaScript in the browser
• C) Encrypting all user data
• D) Implementing strict Content Security Policy (CSP)

Explain the concept of SQL injection and how to prevent it.

• Ignore error messages from the database

• Use parameterized queries, input validation, and escape special characters to prevent SQL injection.

• Allow unrestricted user input

• Use plain text passwords

The _________ statement is used to delete a table.

• DROP TABLE

• DELETE TABLE

• DEL TABLE

• REMOVE TABLE