CS 379 Test 2 || All Accurately Answered.
What type of attack relies on a variation of the input validation attack but has the goal of going
after a user instead of the application or data? correct answers XSS
Which web session vulnerability is directly associated with sessions that remain valid for periods
longer than they are needed? correct answers Long-lived sessions
Which of the following is directly associated with encryption using short keys or keys that are
poorly designed and implemented? correct answers Weak ciphers or encoding algorithms
Common database vulnerabilities include the following except _______. correct answers many
audit log settings
Which of the following typically refers to a virtual environment in the cloud in which a client
rents access to a virtual infrastructure and to certain preinstalled software components? correct
answers Platform as a Service (PaaS)
Quentin is analyzing an attack against his organization. He noticed that the traffic associated with
the attack contains many Transmission Control Protocol (TCP) connection requests where the
handshake was not completed. What type of attack most likely took place? correct answers SYN
flooding
Keith is concerned about the frequency of SQL injection attacks against his organization's web
applications. Which countermeasure is the best defense Keith can implement against SQL
injection? correct answers Server-side input validation
A buffer overflow associated with an web application can result in data being corrupted or
overwritten. correct answers True
Error messages should be considered a potential web server vulnerability because they can
provide vital information to an attacker. correct answers True
What type of attack relies on a variation of the input validation attack but has the goal of going
after a user instead of the application or data? correct answers XSS
Which web session vulnerability is directly associated with sessions that remain valid for periods
longer than they are needed? correct answers Long-lived sessions
Which of the following is directly associated with encryption using short keys or keys that are
poorly designed and implemented? correct answers Weak ciphers or encoding algorithms
Common database vulnerabilities include the following except _______. correct answers many
audit log settings
Which of the following typically refers to a virtual environment in the cloud in which a client
rents access to a virtual infrastructure and to certain preinstalled software components? correct
answers Platform as a Service (PaaS)
Quentin is analyzing an attack against his organization. He noticed that the traffic associated with
the attack contains many Transmission Control Protocol (TCP) connection requests where the
handshake was not completed. What type of attack most likely took place? correct answers SYN
flooding
Keith is concerned about the frequency of SQL injection attacks against his organization's web
applications. Which countermeasure is the best defense Keith can implement against SQL
injection? correct answers Server-side input validation
A buffer overflow associated with an web application can result in data being corrupted or
overwritten. correct answers True
Error messages should be considered a potential web server vulnerability because they can
provide vital information to an attacker. correct answers True
