Font size
WorksheetsWebApp Quiz
Total questions: 104
Worksheet time: 52mins
What is the key step in initiating an HTTP connection?
Sending a direct request to the server
Querying the Domain Name System to transform a URL into an IP address
Establishing an SSL certificate
Encoding the HTTP method
What is pharming?
Sending fraudulent emails to steal user credentials
Redirecting users to a malicious site by providing a false IP address
Injecting malicious code into a webpage
Hijacking a trusted session
What does the HTTP protocol codify?
The encryption standards for secure connections
The exchanges between clients and servers
The structure of webpages
The authentication process for users
What are HTTP methods and status codes?
Methods are encryption types; status codes are error messages
Methods are client requests like GET and POST; status codes are server responses like 200 or 404
Methods are server responses; status codes are client requests
Methods are URL structures; status codes are authentication levels
In what language is the source code of a webpage typically written?
Python and SQL
HTML and JavaScript
C++ and Java
XML and CSS
What are the key steps of an SSL connection?
Compression and data transfer
Authentication with a certificate and encryption choice
URL resolution and method selection
Session termination and cookie storage
By what mechanisms can a user be sent to a malicious website?
SQL injection or buffer overflow
Pharming or phishing
Cross-site scripting or session hijacking
Cookie theft or malware infection
What is OWASP?
A web browser security standard
The Open Web Application Security Project
A database management system
A protocol for secure connections
What does the OWASP Top Ten refer to?
The ten most popular web applications
The ten most serious web security threats
The ten most secure programming languages
The ten most common encryption methods
What is the most prominent threat according to OWASP?
Cross-site scripting
Code injection, particularly SQL injection
Session hijacking
Phishing attacks
What does 'Insecure Direct Object' refer to?
Weak encryption in databases
Allowing unauthorized access to resources via predictable URLs
Unvalidated user inputs
Missing authentication checks
What does 'unvalidated redirect' refer to?
A redirect that bypasses encryption
An automatic redirect to a malicious site
A redirect requiring user authentication
A redirect caused by SQL injection
What criteria does OWASP use to select the Top Ten?
Ease of exploitation and detectability
Prevalence of the attack and severity of consequences
Cost of mitigation and frequency of patches
User awareness and attack complexity
Why have the OWASP Top Ten changed over time?
New programming languages emerged
OWASP shifted focus to severity over prevalence
Attackers stopped using older techniques
Web browsers improved their security
What is Cross Site Scripting (XSS)?
Hijacking a user's session
Injecting HTML or JavaScript code into a webpage
Sending malicious SQL queries
Redirecting users to fake websites
Why is 'Cross Site Scripting' a misnomer?
It only occurs on secure sites
It doesn't always involve scripting across sites
It refers to database attacks
It is unrelated to web browsers
How is a site tested for XSS vulnerability?
By sending SQL queries
By injecting HTML or JavaScript code
By analyzing server logs
By checking encryption strength
What is a persistent (stored) XSS attack?
An attack that redirects users temporarily
An attack that permanently alters webpage content
An attack that steals cookies instantly
An attack that targets server databases
What is a reflected XSS attack?
An attack that persists in the webpage
An attack that uses temporary code to steal data
An attack that modifies server files
An attack that targets the DOM structure
What is the third form of XSS?
SQL-based XSS
DOM-based XSS
Cookie-based XSS
Session-based XSS
What can an attacker achieve with an XSS attack?
Modify server databases
Access cookies, deface webpages, or spread malware
Encrypt user data
Block server access
Which HTML tags are commonly used in XSS attacks?
div and span
iframe and script
table and form
p and h1
What is the Document Object Model (DOM)?
A protocol for secure connections
A convention for structuring webpages
A database management system
A method for encrypting data
How does DOM-based XSS work?
By altering server-side code
By using DOM calls to inject scripts
By redirecting users to malicious sites
By stealing server credentials
How can one defend against XSS attacks?
By using stronger encryption
By sanitizing inputs and avoiding vulnerabilities
By disabling JavaScript entirely
By restricting server access
What is the Same Origin Policy?
A policy to encrypt user data
A policy to prevent cross-site scripting
A policy to validate redirects
A policy to manage cookies
What does AJAX stand for?
Automated JavaScript and XML
Asynchronous JavaScript and XML
Advanced JavaScript and XSS
Application JavaScript and XHR
What is the key technology underlying AJAX?
HTML5 Canvas
XMLHttpRequest (XHR)
WebSocket Protocol
JSON Serialization
What is an example of a CSRF attack?
Injecting JavaScript into a webpage
Hijacking a trusted bank session via a malicious site
Stealing cookies through phishing
Modifying a database with SQL
How are CSRF attacks generally characterized?
Using malicious code to alter webpages
Abusing a website's trust in a user's credentials
Sending fake emails to steal data
Overloading a server with requests
How does CSRF differ from XSS?
CSRF abuses website trust in the user; XSS abuses user trust in the website
CSRF targets databases; XSS targets browsers
CSRF uses SQL; XSS uses JavaScript
CSRF is server-side; XSS is client-side
How can one defend against CSRF attacks?
By encrypting all data transfers
By requiring re-authentication and monitoring browser activity
By disabling JavaScript on the client
By using stronger passwords
What is the Facebook CSRF 'worm'?
A phishing email campaign
A malicious photo that spreads via user walls
A script that steals user passwords
A virus that infects Facebook servers
Why is the Facebook worm a CSRF attack, not phishing?
It encrypts user data
It uses user credentials to post content
It redirects users to a fake login page
It infects the server directly
What is SQL and its purpose?
A protocol for secure web connections
A language for managing databases
A scripting language for webpages
A tool for encrypting data
What is an SQL injection attack?
Injecting JavaScript into a webpage
Using SQL commands to breach a database
Hijacking a user's session
Redirecting users to malicious sites
Why does OWASP consider SQL injection the worst threat?
It is the most complex attack
It often leads to credit card data breaches
It is impossible to defend against
It targets web browsers directly
How does an SQL injection typically proceed?
By exploiting URL redirects
By using vulnerabilities like apostrophes or true statements
By altering webpage scripts
By overloading server memory
Is it easy to avoid SQL injection attacks?
Simple attacks are easy to avoid; sophisticated ones are harder
All attacks are impossible to prevent
All attacks are easily preventable
Only server-side attacks are preventable
What is the typical defense against SQL injection?
Encrypting all database queries
Sanitizing and filtering inputs
Disabling database access
Using stronger passwords
How can attackers circumvent SQL filters?
By using stronger encryption
By obfuscating or using unusual inputs
By targeting web browsers
By disabling server logs
What are the stages of an SQL injection attack?
Encryption, execution, and termination
Entering, information gathering, and attacking
Redirection, scripting, and infection
Authentication, querying, and deletion
How does an attacker discover a database's structure?
By analyzing webpage source code
By querying and interpreting error messages
By decrypting database files
By hijacking user sessions
What is a 'Blind' SQL injection attack?
An attack with no user interaction
An attack where error messages reveal minimal information
An attack targeting encrypted databases
An attack using visual exploits
What are some major DBMSs?
HTML, CSS, JavaScript
MySQL, MS SQL, Oracle
Apache, Nginx, IIS
Python, Java, PHP
What is metadata in the context of databases?
Encrypted user data
General information about the database
Temporary query results
Webpage source code
What is an LDAP injection attack?
Injecting code into webpages
Injecting data into password directories
Hijacking browser sessions
Modifying SQL databases
Are SQL injection dangers decreasing?
Yes, due to better encryption
No, they remain significant
Yes, due to browser improvements
No, but they are less severe
What is the role of browsers?
They encrypt all web traffic
They transform HTML into webpages and send queries
They manage server databases
They authenticate users
Which browsers were involved in the Aurora attack?
Chrome and Firefox
Internet Explorer 6 and 7
Safari and Opera
Edge and Netscape
What is ASLR?
A method to encrypt data
Address Space Layout Randomization
A protocol for secure connections
A tool for filtering inputs
What is DEP?
Data Execution Prevention
Dynamic Encryption Protocol
Database Entry Protection
Domain Extraction Process
What is JIT, and what security concerns does it raise?
Just In Time compiling; it risks executing malicious code
JavaScript Injection Tool; it risks data leaks
Justified Input Testing; it risks SQL injection
Java Integration Technique; it risks session hijacking
What is hijackware?
Malware that encrypts data
Malware that alters browser settings
Malware that steals passwords
Malware that blocks websites
What is URL blacklisting?
Blocking all URLs from a server
Listing malicious websites to avoid
Encrypting URL data
Redirecting URLs to safe sites
What does RIA stand for?
Remote Internet Access
Rich Internet Application
Randomized Input Algorithm
Restricted Interface Authentication
What are layout engines, and how do they vary?
They manage encryption; they vary by protocol
They render webpages; they vary by browser
They store cookies; they vary by user
They filter inputs; they vary by server
What is the role of the DOM?
It encrypts webpage data
It codifies webpage design
It manages server queries
It authenticates users
What does XHR accomplish?
It encrypts data transfers
It updates webpage parts without reloading
It blocks malicious scripts
It stores user cookies
Why are plug-ins needed?
To manage databases
To add functionality like video playback
To encrypt connections
To filter user inputs
What security concerns do plug-ins raise?
They slow down browsers
They may introduce malware
They block legitimate sites
They disable encryption
Why is Flash a notable security concern?
It is slow to load
It is a common malware distribution target
It blocks webpage updates
It requires constant updates
What are the main browsers, and how is their market share evolving?
IE, Firefox, Chrome; Chrome is gaining share
Safari, Opera, Edge; Edge is dominant
Netscape, Chrome, Firefox; Netscape is growing
IE, Safari, Opera; Safari is declining
What does the 'Browser war' refer to?
Competition between plug-ins
Rivalry between IE and Netscape, then Firefox
Conflicts over encryption standards
Battles over database access
What is the smartphone OS and browser market share?
Android and iOS dominate; Blackberry and Nokia decline
Windows dominates; Android declines
Blackberry and Nokia dominate; iOS declines
Symbian and Windows dominate; Android grows
How does Symantec quantify browser security?
By market share
By documented vulnerabilities
By encryption strength
By user adoption rates
What did Symantec's 2010 report find?
Firefox had the most vulnerabilities
Chrome had many vulnerabilities due to bounty programs
IE was the most secure
Safari had no vulnerabilities
What is JIT hardening?
Encrypting JavaScript code
Protecting against JIT spraying attacks
Blocking browser plug-ins
Filtering URL requests
What is a Man in the Browser attack?
A server-side data breach
Malware controlling the browser
A phishing email campaign
A database injection attack
How does OWASP provide defense recommendations?
Through encryption protocols
Through developer-focused cheat sheets
Through browser updates
Through database filters
What is 'Broken Authentication and Session Management'?
Weak encryption of data
Tampering with a trusted session
Redirecting users to malicious sites
Injecting malicious scripts
What defense does OWASP suggest for broken authentication?
Disabling JavaScript
Implementing strong authentication
Encrypting all webpages
Blocking user logins
How do A-4 (Insecure Object References) and A-8 (Failure to Restrict URL Access) differ?
They are identical issues
They differ slightly in URL manipulation scope
A-4 is server-side; A-8 is client-side
A-4 uses encryption; A-8 does not
How does OWASP recommend avoiding unvalidated redirects?
By encrypting redirects
By whitelisting valid redirect destinations
By disabling redirects entirely
By requiring user confirmation
What is 'Insecure Cryptographic Storage'?
Weak passwords in databases
Exposing confidential data due to storage glitches
Unencrypted webpage content
Missing session cookies
Are security misconfigurations easily avoidable?
Always easy to avoid
Some are avoidable, but not all
Impossible to avoid
Only avoidable with encryption
What does XHR stand for and do?
XML High Resolution; it encrypts data
XMLHTTPRequest; it enables asynchronous data exchange
Extended HTTP Request; it filters inputs
XML Hyperlink Resource; it redirects users
Does XHR support only one method?
Yes, only GET
No, it supports GET and POST
Yes, only POST
No, it supports SQL and JSON
What is the security concern with XHR?
It slows down webpages
It may allow injection of malicious content
It blocks legitimate queries
It disables encryption
What is the DOM's structure?
A linear list
A tree structure
A tabular format
A sequential array
Why was DOM deemed useful/necessary?
To encrypt webpage data
To facilitate complex website design
To manage server queries
To store user credentials
What is JSON?
JavaScript Object Notation
Java Serialized Object Network
Joint Scripting Online Notation
JavaScript Secure Object Node
What does 'serialization' refer to, and what security concerns does it promote?
Converting data for storage; it risks malicious data inclusion
Encrypting data; it risks decryption failures
Compressing data; it risks data loss
Indexing data; it risks database corruption
What is a 'penetration tester'?
A tool for encrypting data
A program or person testing website vulnerabilities
A protocol for secure connections
A filter for user inputs
What does sqlmap do?
It encrypts databases
It tests SQL databases for injection vulnerabilities
It manages webpage layouts
It filters browser requests
What is the 'Burp Suite'?
A browser plug-in
A tool for analyzing and attacking websites
A database management system
A protocol for secure transfers
What does Burp Suite do when acting as a proxy?
It encrypts all traffic
It intercepts HTTP queries from the browser
It blocks malicious sites
It manages user sessions
What do the 'spider' and scanner in Burp Suite do?
They encrypt and decrypt data
They crawl URLs and scan for vulnerabilities
They manage cookies and sessions
They filter user inputs
What is BeEF, and what does it enable with Burp or sqlmap?
A database tool; it encrypts queries
A browser exploitation tool; it enables browser-based attacks
A webpage editor; it modifies layouts
A proxy server; it filters traffic
Can these tools be used by attackers?
No, they are strictly defensive
Yes, they can be used maliciously
Only if modified
Only by authorized users
What is a "penetration tester"?
A tool for encrypting data
A program or person testing website vulnerabilities
A protocol for secure connections
A filter for user inputs
What does sqlmap do?
It encrypts databases
It tests SQL databases for injection vulnerabilities
It manages webpage layouts
It filters browser requests
What is the "Burp Suite"?
A browser plug-in
A tool for analyzing and attacking websites
A database management system
A protocol for secure transfers
What does Burp Suite do when acting as a proxy?
It encrypts all traffic
It intercepts HTTP queries from the browser
It blocks malicious sites
It manages user sessions
What do the "spider" and scanner in Burp Suite do?
They encrypt and decrypt data
They crawl URLs and scan for vulnerabilities
They manage cookies and sessions
They filter user inputs
What is BeEF, and what does it enable with Burp or sqlmap?
A database tool; it encrypts queries
A browser exploitation tool; it enables browser-based attacks
A webpage editor; it modifies layouts
A proxy server; it filters traffic
Can these tools be used by attackers?
No, they are strictly defensive
Yes, they can be used maliciously
Only if modified
Only by authorized users
What was the smartphone market share in 2011?
iOS and Android dominated; Blackberry and Nokia declinedBlackberry and Nokia led; iOS declined
Blackberry and Nokia led; iOS declined
Windows dominated; Android grew
Symbian led; iOS and Android declined
What is ENISA?
A web security protocol
The European Network Information Security Agency
A database management system
A browser plug-in
What are ENISA’s top three smartphone security threats?
SMShing, war-texting, Bluetooth snooping
Loss of device, data disclosure, decommissioned devices
SQL injection, XSS, CSRF
Phishing, malware, session hijacking
How does ENISA’s threat list compare to magazine lists?
They are identical
Magazines focus on non-device-specific threats
Magazines focus on device loss
Magazines ignore cybersecurity
What is the "one minute attack"?
A rapid SQL injection
A spyware attack exposing smartphone content
A phishing email campaign
A server overload attack
What was the DroidDream incident?
A phishing attack on iOS
Malware in 50 Android apps
A data breach on Blackberry
A server attack on Nokia
What security concerns does cloud computing raise?
Slow webpage loading
Remote storage of sensitive data
Weak browser encryption
Limited database access
