Security+ Chapter 3 Review Questions

a. Although traditional network security devices can block traditional network attacks, they cannot always block web application attacks. *b. The processors on clients are smaller than on web servers, and thus, they are easier to defend.* c. Many web application attacks exploit previously unknown vulnerabilities. d. By design, dynamic server-side web applications accept user input that can contain malicious code.

a. Accept-Language b. Referer c. Response splitting *d. Content-length*

*a. Flash cookie* b. session cookie c. RAM cookie d. secure cookie

a. only function on web servers *b. can be embedded inside a webpage, but add-ons cannot* c. have additional functionality to the entire browser d. have been replaced by browser extensions.

a. buffer overflow b. real number c. heap size *d. integer overflow*

a. privilege rights b. heap spray *c. transitive* d. vertical escalation

*a. Traditional network security devices ignore the content of HTTP traffic, which is the vehicle of web application attacks.* b. Web application attacks use web browsers that cannot be controlled on a local computer. c. Network security devices cannot prevent attacks from web resources. d. The complex nature of TCP/IP allows for too many ping sweeps to be blocked.

a. erase buffer overflow signature files b. corrupt the kernel so the computer cannot reboot *c. point to another area in data memory that contains the attacker's malware code* d. place a virus into the kernel

a. SQL code is used in an XSS attack. b. XSS requires the use of a browser. *c. XSS does not attack the web application server to steal or corrupt its information.* d. XSS attacks are rarely used anymore compared to other injection attacks.

a. first-party cookie b. second-party cookie *c. third-party cookie* d. fourth-party cookie

a. to have the SQL server attack client web browsers *b. to inject SQL statements through unfiltered user input* c. to expose SQL code so that it can be examined d. to link SQL servers into a botnet

*a. reformat the web application server's hard drive* b. display a list of customer telephone numbers c. discover the names of different fields in a table d. erase a database table

a. ICMP b. HTTP c. HTML *d. XML*

a. SQL injection b. command injection c. XML injection *d. directory traversal*

a. XML manipulation b. HTML packet c. SQL injection *d. HTTP header*

a. XML code used in an XML injection attack *b. a random string assigned by a web server* c. another name for a third-party cookie d. a unique identifier that includes the user's email address

a. SYN flood b. ping flood c. smurf *d. push flood*

a. SIDS b. interceptor *c. man-in-the-middle* d. SQL intrusion

a. is considered to be a type of DoS attack *b. makes a copy of the transmission for use at a later time* c. can be prevented by patching the web browser d. replays the attack over and over to flood the server

a. floods a DNS server with requests until it can no longer respond. b. is rarely found today due to the use of host tables. *c. substitutes DNS addresses so that the computer is automatically redirected to another device.* d. is the same as ARP poisoning.