Introduction to Web Security

What is web security?

• Web security is the process of creating websites.

• Web security refers to the design of web pages.

• Web security is only about protecting personal data.

• Web security is the practice of protecting websites and online services from cyber threats.

What does “Web Security” primarily aim to protect?

• Only the website design

• Just the server hardware

• Data, applications, and users from attacks

• The internet connection speed

What is the purpose of HTTPS?

• The purpose of HTTPS is to provide secure communication over a computer network.

• To provide faster internet speeds.

• To allow anonymous browsing.

• To enable file sharing over the network.

What is a firewall and how does it work?

• A firewall is a physical barrier that prevents unauthorized access to buildings.

• A firewall is a network security device that monitors and controls network traffic based on security rules.

• A firewall is a device that boosts internet speed by compressing data.

• A firewall is a type of antivirus software that removes malware from devices.

What is the difference between authentication and authorization?

• Authentication is a one-time process; authorization is ongoing.

• Authentication grants access; authorization checks identity.

• Authentication verifies identity; authorization determines access rights.

• Authentication is for users; authorization is for devices.

What is a phishing attack?

• A type of software used for data encryption.

• A technique for improving email security.

• A method to securely share passwords online.

• A phishing attack is a deceptive attempt to obtain sensitive information by masquerading as a trustworthy entity.

What are cookies and how do they relate to security?

• Cookies are data stored by web browsers that can impact security if not managed properly.

• Cookies are physical items that you can eat.

• Cookies are only used for storing passwords.

• Cookies are a type of malware that harm your device.

What is two-factor authentication (2FA)?

• A method to reset your password

• Two-factor authentication (2FA) is a security measure that requires two forms of verification to access an account.

• A single password for all accounts

• A way to encrypt your data

Which protocol is more secure for transmitting sensitive information?

• HTTP

• FTP

• Telnet

• HTTPS

What is the main difference between HTTP and HTTPS?

• HTTPS loads faster than HTTP

• HTTPS encrypts communication between client and server

• HTTP uses cookies, HTTPS does not

• HTTPS only works on mobile devices