WorksheetsCyber Thursday - Sensitive Data Exposure
Total questions: 10
Worksheet time: 3mins
Which one of the below methods is NOT a way to prevent sensitive data exposure?
Minimize data surface area.
Enable autocomplete on forms that collect data.
Disable caching on forms that collect data.
Encrypt data during transport and at rest.
Identify a hashing algorithm
RSA
DSA
AES
MD5
Question 3) What is the top vulnerability leading to data breaches?
Sensitive Data Exposure
Cross Site Scripting
Cross Site Request Forgery
SQL Injection
The PCI DSS Standard is used for which Industry
E-Commerce industry
Banking Industry
Entertainment Industry
Telecommunication Industry
Best way to avoid breach of sensitive data is with:
A PCI-compliant appliance
Strong encryption
To not store the data in the first place
User authentication and Authorization
For an an indirect reference, what happens if there's no list of limited values authorized for a user in the direct reference?
SQL Injection
Brute Forcing of stored encrypted credentials
XML Injection
Access to sensitive data possible
Which one of these is an Encryption algorithm
MD5
SHA256
Blowfish
SHA512
Which one of these is NOT the recommended to prevent to Sensitive Data Exposure?
Sensitive Data is never stored in clear text.
The algorithms used to encrypt the data are considered strong enough.
Store passwords in Database in plain text.
The generation of the keys is secure.
Which one of these is a Secure Protocol
HTTP
FTP
HTTPS
Telnet
Which of them is not an example of physical data leakage?
Dumpster Diving
Shoulder Surfing
Printers and Photocopiers
Phishing
