Font size
Worksheets6076 t1
Total questions: 65
Worksheet time: 35mins
What does HTML stand for?
HyperText Markup Language
HyperText Makeup Language
Hyperlink Text Markup Language
HighTech Markup Language
During lab, the purpose of using Burp Suite Sequencer was…
(a)
STRIDE is a classification system originally developed by:
mycrosoft
amazon
apple
Can Burp be used as a proxy with SSL?
true
false
maybe
something
Which of the following involves control of functionality users can access?
User Preferences
access control
User Privileges
User Permissions
A CVE will have many CWEs.
true
false
Which of the following is not a primary defense approach when it comes to most web application security issues?
Firewalls
Encryption
Secure Coding Practices
Programming Languages
Running two instances of Burp Suite may cause issues because of the port bindings.
true
false
Burp can be used as a proxy with SSL
true
false
There are more threat vectors than time or money to protect against them
true
false
Whitelist validation is always more difficult to implement than Blacklist validation.
true
false
Running two instances of Burp Suite may cause issues because of the port bindings.
true
false
To be considered a vulnerability, it must:
Pose a threat
Have a weakness
Be exploitable
All of the above
Which of the following is not a primary defense approach when it comes to most web application security issues?
Firewalls
Encryption
Secure Coding Practices
Programming Languages
Which of the following is not a main factor when determining CVSS scores?
Base Score
Temporal Score
Environmental Score
Configuration Score
CSS resets are typically done in order to:
Optimize website performance
Increase website security
Apply CSS styling to an entire web application
Minimize cross-browser inconsistencies
HTML 4.01 comes in which three flavors?
FRAMESET
STRICT
TRANSITIONAL
Any
Which of the following HTML tags is used to define CSS when it is being used internally?
<link>
<style>
<script>
<meta>
When defining HTML attributes you can only use double quotes to enclose the value portion of the attributes
true
false
The use of CSS can increase a site’s ranking with search engines.
true
false
The CSS Box Model includes the following
Padding, Margin, Border, Content
Padding, Margin, Border, Background
Padding, Margin, Border, Outline
Padding, Border, Content, Outline
When you initially setup your VM lab, the type of hash function you used to verify the integrity of the VM downloads was:
SHA1
SHA512
MD5
SHA256
All the major browsers allow users to view the source HTML for any given page, with the exception of Firefox that requires a plugin to be installed before you can view the source HTML
true
false
Which of the following HTML tags would you use for the largest or most important heading?
h1
h2
h3
h4
Attribute minimization is forbidden in HTML
true
false
CSS was created to separate design elements from markup logic
true
false
Which of the following is the valid document type declaration for HTML version 5?
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN
<!DOCTYPE html>
<!DOCTYPE HTML>
CSS integrates in HTML in the following ways:
Externally, Embedded, Internal
Externally, Embedded, Inline
Linked, Embedded, Internal
Linked, Inline, Interna
Where should you refer to your external style sheet within your HTML document?
In the <body> portion of your HTML document
In the <footer> portion of your HTML document
In the <head> portion of your HTML document
In the <title> portion of your HTML document
Style sheets are typically cached by browsers.
true
false
Which website did we use to illustrate the power of CSS?
What does CSS stands for?
Cascading Style Sheets
Cascading Script Style
Centralized Styling System
Centralized Styling Syntax
By default, Apache on Ubuntu 18.04 uses the following directory to serve web pages:
/var/www
/srv/www
/opt/www
/var/www/html
Pick the HTML markup that meets W3C’s current standards:
<p> <b> Text to be displayed </b> </p>
<p> <strong> Text to be displayed </strong> </p>
<p> <em> Text to be displayed </em> </p>
<p> <i> Text to be displayed </i> </p>
HTML Encoding is a particularly useful form of input validation because it doesn’t remove any text formatting.
true
false
Which of the following is the proper way to use the Horizontal Rule tag in HTML?
<hr>
<horizontal-line>
<br>
<line>
Which of the following statements are true about HTML tags?
HTML tags are case-sensitive
HTML tags normally come in pairs
HTML tags cannot be nested
HTML tags do not affect the appearance of the content
A Georgian woman cut off web access for five hours while scavenging for copper when she sliced through a cable providing internet access to which of the following countries?
Armenia
Georgia
london
usa
nepal
When a user navigates to a web page, the HTML tags are displayed to the user
true
false
In CSS, nested tags override inherited styles.
true
false
HTML5 syntax is based on the Standard Generalized Markup Language SGML.
true
false
XML was designed to replace HTML.
true
false
An IPv4 address uses how many bits?
4bits
8bits
16bits
32bits
Most JavaScript attacks are server-side attacks
true
false
JavaScript code located inside an HTML page can easily modify local files on your computer
true
false
JavaScript should be enclosed within which of the following HTML tags?
<javascript></javascript>
<style></style>
<script></script>
<code></code>
Which organization is most responsible for current JavaScript standards?
Mozilla Foundation
Google Inc.
World Wide Web Consortium (W3C)
Microsoft Corporation
Which of the following are considered DOM window objects? History, document, location, window, navigator, screen, console.
console
screen
navigator
window
location
Javascript injection can only occur on forms that are not hidden.
true
false
DHTML includes the following: Scripting, Presentation, DOM, Markup
Presentation
DOM
Markup
Scripting
JavaScript is only a Client-Side Scripting language
true
false
It is recommended that JavaScript sanitizes and validates all user input before it is processed by SQL
true
false
JavaScript can modify local clients files before they are sent to the Web Server.
true
false
What does DOM stand for?
Document Object Manager
Document Oriented Model
Document Object Model
Document Object Markup
In JavaScript, OnMouseover is an example of a Method
true
false
Which of the following JavaScript lines can be used to modify items without any visible notifications?
Javascript:modify()
Javascript:hideNotifications();
Javascript:void();
Javascript:modifyHidden();
Which of the following is not an example of a Markup Language?
HTML
XML
JSON
AJAX
When configuring IP information in Ubuntu 18.04 Linux, you need to edit which of the following files?
/etc/network/interfaces
/etc/netplan
/etc/hosts
/etc/resolv.conf
When configuring IP information in Kali Linux, you need to edit which of the following files?
/etc/network/interfaces
/etc/netplan
/etc/hosts
/etc/resolv.conf
Tech companies are turning to web applications for Software as a Service Applications
true
false
SSL does not stop a malicious user from altering the data a server is expecting
true
false
The main difference between a scripting language and a programming language is compilation
true
false
Malicious users can alter data being sent to a server through:
Request parameters
Cookies
HTTP Headers
All of the above
When it comes to web application security, which of the following is true?
Back-end servers cannot be compromised through a web app
Back-end servers can only be compromised through a web app if they are poorly configured
Back-end servers can be compromised through a web app
Back-end servers are immune to attacks from web apps
A CWE will have many CVEs.
true
false
