WorksheetsYCEP Quiz
Total questions: 7
Worksheet time: 5mins
What is a Vulnerability in CyberSecurity?
A weakness in a flaw in a computed system that does not weaken the software and hardware
A weakness in an information system
An exploit or trigger by a harmless source.
The conditions determined by physical, social, economic and environmental factors or processes which increase the susceptibility of an individual, a community, assets or systems to the impacts of hazards
Which DevTool did we not cover?
Inspector
Network
Storage
Memory
What is not covered in Cross-Site scripting?
Non-Persistent XSS
Stored XSS
DOM-based XSS
Cross-site XSS
In this link, which part is the fragment?
https://www.google.com/search?client=avast-a-1&q=Nullsec&oq=Nullsec&aqs=avast..69i57j69i65f3j0l4.17668j0j1&ie=UTF-8#idjwique2108389247sadj:3008
Note: This is not a real website
&aqs=avast..69i57j69i65f3j0l4.17668j0j1
:3008
#idjwique2108389247sadj
www.google.com/search?client=avast-a-1&q=Nullsec
What is not a method that we taught in the slides to stop WEB attacks?
Validation
- Compare the input against a whitelist of allowed values
- Ensure that user input is not the only one supplying all parts of the path
Data Debugging
- Replaces special characters so that they do not get interpreted as active content
< becomes %3E in URLs
- storing information about a compiled computer program for use by high-level debuggers
- Did you confuse data encoding with data debugging?
Sanitisation
- Cleaning up user-provided inputs to prevent execution of unintended code through:
- Escaping/Replacing characters (' → \')
Removing characters or keywords
FireWalls
- Rule-based blocking (blocking unused SQL keywords)
- Inspecting and intercepting suspicious requests
- Rate-limit sources making too many attempts
What is the Query for SQL Injection?
' OR 1 = 1 --
" OR "1" = "1"
' OR "1" = "1"
" OR 1 = 1 -- "
Which of the following is Correct?
wwwroot contains index.html, style.css and script.js
Absolute Path is represented using: ../../IdontKnow/NotAbsolute
Relative Path is represented using: ../../IdontKnow/NotAbsolute
Distinct path is represented using: /dirB/IamnotAbsolute
