WorksheetsDay 4 - Application Security
Total questions: 5
Worksheet time: 3mins
Cross-Site Scripting (XSS) allows attackers to inject scripts that execute in other users’ browsers
True
False
Secure coding principles recommend showing detailed error messages to users for easier debugging
True
False
What is the main goal of SQL Injection attacks?
To overload the server’s memory
To manipulate database queries and gain unauthorized access to data
To encrypt files for ransom
To scan the network for open ports
Which practice helps prevent XSS vulnerabilities?
Storing credentials in plain text
Disabling firewalls
Applying output encoding and sanitizing user input
Using outdated libraries
What does the principle of Least Privilege mean in application security?
Granting only the minimum permissions required for tasks
Allowing all users full access to reduce delays
Removing all authentication checks
Hiding vulnerabilities instead of fixing them
