Sanitizing user input mainly protects against:

Which HTTP attribute prevents cookies from being accessed via JavaScript?

A web page loads correctly but reveals database errors when special characters are entered. This indicates:

Which OWASP category includes excessive permissions?

Which attack forces a logged-in user to unknowingly perform an action?

Encoding output is a countermeasure mainly against:

Which testing approach simulates real attacker behavior?

Which vulnerability exists when server-side validation is absent?

Which HTTP verb is commonly restricted due to file upload risk?

Which scan type sends packets with no TCP flags set?

A firewall allowing traffic based on connection state is:

Which protocol resolves IP to MAC address?

Which attack manipulates ARP cache entries?

Which protocol is used for secure remote login?

Which tool is MOST suitable for packet capture and analysis?

Which scanning technique is hardest to trace back to attacker?

Which port is used by DNS?

Which network device separates broadcast domains?

A packet sent to broadcast address causing replies from multiple hosts indicates:

Malware disguised as legitimate software is:

Which malware modifies OS kernel for stealth?

Which malware spreads without human interaction?

A reverse shell is preferred by attackers because it:

Which technique hides data in images?

Which virus changes its signature on each infection?

Antivirus signature detection fails MOST against:

A botnet mainly consists of:

Which attack exhausts system resources?

Which log should be cleared to hide login activity on Windows?

Which wireless encryption is considered insecure?

Which wireless attack creates a fake access point?

Which attack uses SMS to trick users?

Risk is BEST defined as:

Which control aims to discourage attackers?

Which principle ensures no single user has complete control?

IDS differs from IPS because IDS:

Which security control is applied AFTER an incident?

Which authentication factor is a password?

Which assessment technique uses scenarios and workshops?