wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

6076 t1

Total questions: 65

Worksheet time: 35mins

Name
Class
Date
1.

What does HTML stand for?

a)

HyperText Markup Language

b)

HyperText Makeup Language

c)

Hyperlink Text Markup Language

d)

HighTech Markup Language

2.

During lab, the purpose of using Burp Suite Sequencer was…

(a)  

3.

STRIDE is a classification system originally developed by:

a)

mycrosoft

b)

google

c)

amazon

d)

apple

4.

Can Burp be used as a proxy with SSL?

a)

true

b)

false

c)

maybe

d)

something

5.

Which of the following involves control of functionality users can access?

a)

User Preferences

b)

access control

c)

User Privileges

d)

User Permissions

6.

A CVE will have many CWEs.

a)

true

b)

false

7.

Which of the following is not a primary defense approach when it comes to most web application security issues?

a)

Firewalls

b)

Encryption

c)

Secure Coding Practices

d)

Programming Languages

8.

Running two instances of Burp Suite may cause issues because of the port bindings.

a)

true

b)

false

9.

Burp can be used as a proxy with SSL

a)

true

b)

false

10.

There are more threat vectors than time or money to protect against them

a)

true

b)

false

11.

Whitelist validation is always more difficult to implement than Blacklist validation.

a)

true

b)

false

12.

Running two instances of Burp Suite may cause issues because of the port bindings.

a)

true

b)

false

13.

To be considered a vulnerability, it must:

a)

Pose a threat

b)

Have a weakness

c)

Be exploitable

d)

All of the above

14.

Which of the following is not a primary defense approach when it comes to most web application security issues?

a)

Firewalls

b)

Encryption

c)

Secure Coding Practices

d)

Programming Languages

15.

Which of the following is not a main factor when determining CVSS scores?

a)

Base Score

b)

Temporal Score

c)

Environmental Score

d)

Configuration Score

16.

CSS resets are typically done in order to:

a)

Optimize website performance

b)

Increase website security

c)

Apply CSS styling to an entire web application

d)

Minimize cross-browser inconsistencies

17.

HTML 4.01 comes in which three flavors?

a)

FRAMESET

b)

STRICT

c)

TRANSITIONAL

d)

Any

18.

Which of the following HTML tags is used to define CSS when it is being used internally?

a)

<link>

b)

<style>

c)

<script>

d)

<meta>

19.

When defining HTML attributes you can only use double quotes to enclose the value portion of the attributes

a)

true

b)

false

20.

The use of CSS can increase a site’s ranking with search engines.

a)

true

b)

false

21.

The CSS Box Model includes the following

a)

Padding, Margin, Border, Content

b)

Padding, Margin, Border, Background

c)

Padding, Margin, Border, Outline

d)

Padding, Border, Content, Outline

22.

When you initially setup your VM lab, the type of hash function you used to verify the integrity of the VM downloads was:

a)

SHA1

b)

SHA512

c)

MD5

d)

SHA256

23.

All the major browsers allow users to view the source HTML for any given page, with the exception of Firefox that requires a plugin to be installed before you can view the source HTML

a)

true

b)

false

24.

Which of the following HTML tags would you use for the largest or most important heading?

a)

h1

b)

h2

c)

h3

d)

h4

25.

Attribute minimization is forbidden in HTML

a)

true

b)

false

26.

CSS was created to separate design elements from markup logic

a)

true

b)

false

27.

Which of the following is the valid document type declaration for HTML version 5?

a)

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"

b)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN

c)

<!DOCTYPE html>

d)

<!DOCTYPE HTML>

28.

CSS integrates in HTML in the following ways:

a)

Externally, Embedded, Internal

b)

Externally, Embedded, Inline

c)

Linked, Embedded, Internal

d)

Linked, Inline, Interna

29.

Where should you refer to your external style sheet within your HTML document?

a)

In the <body> portion of your HTML document

b)

In the <footer> portion of your HTML document

c)

In the <head> portion of your HTML document

d)

In the <title> portion of your HTML document

30.

Style sheets are typically cached by browsers.

a)

true

b)

false

31.

Which website did we use to illustrate the power of CSS?

32.

What does CSS stands for?

a)

Cascading Style Sheets

b)

Cascading Script Style

c)

Centralized Styling System

d)

Centralized Styling Syntax

33.

By default, Apache on Ubuntu 18.04 uses the following directory to serve web pages:

a)

/var/www

b)

/srv/www

c)

/opt/www

d)

/var/www/html

34.

Pick the HTML markup that meets W3C’s current standards:

a)

<p> <b> Text to be displayed </b> </p>

b)

<p> <strong> Text to be displayed </strong> </p>

c)

<p> <em> Text to be displayed </em> </p>

d)

<p> <i> Text to be displayed </i> </p>

35.

HTML Encoding is a particularly useful form of input validation because it doesn’t remove any text formatting.

a)

true

b)

false

36.

Which of the following is the proper way to use the Horizontal Rule tag in HTML?

a)

<hr>

b)

<horizontal-line>

c)

<br>

d)

<line>

37.

Which of the following statements are true about HTML tags?

a)

HTML tags are case-sensitive

b)

HTML tags normally come in pairs

c)

HTML tags cannot be nested

d)

HTML tags do not affect the appearance of the content


38.

A Georgian woman cut off web access for five hours while scavenging for copper when she sliced through a cable providing internet access to which of the following countries?

a)

Armenia
Georgia

b)

london

c)

usa

d)

nepal

39.

When a user navigates to a web page, the HTML tags are displayed to the user

a)

true

b)

false

40.

In CSS, nested tags override inherited styles.

a)

true

b)

false

41.

HTML5 syntax is based on the Standard Generalized Markup Language SGML.

a)

true

b)

false

42.

XML was designed to replace HTML.

a)

true

b)

false

43.

An IPv4 address uses how many bits?

a)

4bits

b)

8bits

c)

16bits

d)

32bits

44.

Most JavaScript attacks are server-side attacks

a)

true

b)

false

45.

JavaScript code located inside an HTML page can easily modify local files on your computer

a)

true

b)

false

46.

JavaScript should be enclosed within which of the following HTML tags?

a)

<javascript></javascript>

b)

<style></style>

c)

<script></script>

d)

<code></code>


47.

Which organization is most responsible for current JavaScript standards?

a)

Mozilla Foundation

b)

Google Inc.

c)

World Wide Web Consortium (W3C)

d)

Microsoft Corporation


48.

Which of the following are considered DOM window objects? History, document, location, window, navigator, screen, console.

a)

console

b)

screen

c)

navigator

d)

window

e)

location

49.

Javascript injection can only occur on forms that are not hidden.

a)

true

b)

false

50.

DHTML includes the following: Scripting, Presentation, DOM, Markup

a)

Presentation

b)

DOM

c)

Markup

d)

Scripting

51.

JavaScript is only a Client-Side Scripting language

a)

true

b)

false

52.

It is recommended that JavaScript sanitizes and validates all user input before it is processed by SQL

a)

true

b)

false

53.

JavaScript can modify local clients files before they are sent to the Web Server.

a)

true

b)

false

54.

What does DOM stand for?

a)

Document Object Manager

b)

Document Oriented Model

c)

Document Object Model

d)

Document Object Markup

55.

In JavaScript, OnMouseover is an example of a Method

a)

true

b)

false

56.

Which of the following JavaScript lines can be used to modify items without any visible notifications?

a)

Javascript:modify()

b)

Javascript:hideNotifications();

c)

Javascript:void();

d)

Javascript:modifyHidden();

57.

Which of the following is not an example of a Markup Language?

a)

HTML

b)

XML

c)

JSON

d)

AJAX

58.

When configuring IP information in Ubuntu 18.04 Linux, you need to edit which of the following files?

a)

/etc/network/interfaces

b)

/etc/netplan

c)

/etc/hosts

d)

/etc/resolv.conf

59.

When configuring IP information in Kali Linux, you need to edit which of the following files?

a)

/etc/network/interfaces

b)

/etc/netplan

c)

/etc/hosts

d)

/etc/resolv.conf

60.

Tech companies are turning to web applications for Software as a Service Applications

a)

true

b)

false

61.

SSL does not stop a malicious user from altering the data a server is expecting

a)

true

b)

false

62.

The main difference between a scripting language and a programming language is compilation

a)

true

b)

false

63.

Malicious users can alter data being sent to a server through:

a)

Request parameters

b)

Cookies

c)

HTTP Headers

d)

All of the above

64.

When it comes to web application security, which of the following is true?

a)

Back-end servers cannot be compromised through a web app

b)

Back-end servers can only be compromised through a web app if they are poorly configured

c)

Back-end servers can be compromised through a web app

d)

Back-end servers are immune to attacks from web apps

65.

A CWE will have many CVEs.

a)

true

b)

false