Question 1

Which of the following is the interface that determines how a Web server passes data to a Web browser?

Accepted Answer

A)  Perl 
B)  ASP 
C)  CGI 
D)  PHP 
A)  Perl 
B)  ASP 
C)  CGI 
D)  PHP C

Question 2

Which of the following programming languages was originally used primarily on UNIX systems,but is used more widely now on many platforms,such as Macintosh and Windows?

Accepted Answer

A)  HTML 
B)  JScript 
C)  VBScript 
D)  PHP 
A)  HTML 
B)  JScript 
C)  VBScript 
D)  PHP D

Question 3

Which of the following application tests analyzes a running application for vulnerabilities?

Accepted Answer

A)  Static Application Security Testing 
B)  Fast Application Security Testing 
C)  Dynamic Application Security Testing 
D)  Executable Application Security Testing 
A)  Static Application Security Testing 
B)  Fast Application Security Testing 
C)  Dynamic Application Security Testing 
D)  Executable Application Security Testing C

Question 4

Match each item with a statement below.
-The analysis of a running application for vulnerabilities

Accepted Answer

A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST 
A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Question 5

Match each item with a statement below.
-Open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages

Accepted Answer

A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST 
A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Question 6

Match each item with a statement below.
-The attacker supplies SQL commands when prompted to fill in a Web application field

Accepted Answer

A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST 
A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Question 7

Which of the following cross-site scripting vulnerabilities types relies on social engineering to trick a user into visiting a maliciously crafted link or URL?

Accepted Answer

A)  reflected 
B)  injected 
C)  unvalidated 
D)  Stored 
A)  reflected 
B)  injected 
C)  unvalidated 
D)  Stored

Question 8

What is the specific act of filtering,rejecting,or sanitizing a user's untrusted input before the application processes it?

Accepted Answer

A)  input validation 
B)  authorization 
C)  input auditing 
D)  discovery 
A)  input validation 
B)  authorization 
C)  input auditing 
D)  discovery

Question 9

Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications,such as Word or Excel,to interact with the Web?

Accepted Answer

A)  ADOSQL 
B)  ADO 
C)  SQL 
D)  SNAOLEDB 
A)  ADOSQL 
B)  ADO 
C)  SQL 
D)  SNAOLEDB

Question 10

Visual Basic Script (VBScript)is a scripting language developed by which of the following companies?

Accepted Answer

A)  Sun Microsystems 
B)  Symantec 
C)  Macromedia 
D)  Microsoft 
A)  Sun Microsystems 
B)  Symantec 
C)  Macromedia 
D)  Microsoft

Question 11

CGI programs can be written in many different programming and scripting languages,such as C/C++,Perl,UNIX shells,Visual Basic,and FORTRAN.

Accepted Answer

A) True 
 B)False

Question 12

Match each item with a statement below.
-Analysis of an application's source code for vulnerabilities

Accepted Answer

A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST 
A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Question 13

Which specific type of tag do All CFML tags begin with?

Accepted Answer

A)  # 
B)  CF 
C)  CFML 
D)  % 
A)  # 
B)  CF 
C)  CFML 
D)  %

Question 14

Which JavaScript function is a "method" or sequence of statements that perform a routine or task?

Accepted Answer

A)  getElementById() 
B)  document.write() 
C)  CFLOCATION() 
A)  getElementById() 
B)  document.write() 
C)  CFLOCATION()

Question 15

Which of the following cross-site scripting vulnerabilities types is especially harmful because it can be delivered to subsequent users of the application?

Accepted Answer

A)  reflected 
B)  injected 
C)  unvalidated 
D)  Stored 
A)  reflected 
B)  injected 
C)  unvalidated 
D)  Stored

Question 16

What is ColdFusion and which company owns the rights to ColdFusion?

Accepted Answer

ColdFusion is a server-side scripting la

Question 17

Connecting to an MS SQL Server database with Microsoft's Object Linking and Embedding Database (OLE DB)requires using which of the following providers?

Accepted Answer

A)  ADSDSOOBJECT 
B)  MySQLProv 
C)  SQLOLEDB 
D)  SNAOLEDB 
A)  ADSDSOOBJECT 
B)  MySQLProv 
C)  SQLOLEDB 
D)  SNAOLEDB

Question 18

What is ODBC,and how can it be utilized?

Accepted Answer

The ODBC interface allows an application

Question 19

Match each item with a statement below.
-A technology that developers can use to display HTML documents to users on the fly

Accepted Answer

A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST 
A) ASP 
B) SQLi 
C) ODBC 
D) PHP 
E) CGI
F)virtual directory
G)DAST
H)dynamic Web pages
I)static Web pages
J)SAST

Question 20

Which of the following resources is an excellent starting point for security professionals when investigating VBScript vulnerabilities?

Accepted Answer

A)  CVE Web site 
B)  CERT 
C)  Microsoft Security Bulletin 
D)  Macromedia security 
A)  CVE Web site 
B)  CERT 
C)  Microsoft Security Bulletin 
D)  Macromedia security

Which of the following is the interface that determines how a Web server passes data to a Web browser?

Which of the following programming languages was originally used primarily on UNIX systems,but is used more widely now on many platforms,such as Macintosh and Windows?

Which of the following application tests analyzes a running application for vulnerabilities?

Match each item with a statement below. -The analysis of a running application for vulnerabilities

Match each item with a statement below. -Open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages

Match each item with a statement below. -The attacker supplies SQL commands when prompted to fill in a Web application field

Which of the following cross-site scripting vulnerabilities types relies on social engineering to trick a user into visiting a maliciously crafted link or URL?

What is the specific act of filtering,rejecting,or sanitizing a user's untrusted input before the application processes it?

Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications,such as Word or Excel,to interact with the Web?

Visual Basic Script (VBScript)is a scripting language developed by which of the following companies?

CGI programs can be written in many different programming and scripting languages,such as C/C++,Perl,UNIX shells,Visual Basic,and FORTRAN.

Match each item with a statement below. -Analysis of an application's source code for vulnerabilities

Which specific type of tag do All CFML tags begin with?

Which JavaScript function is a "method" or sequence of statements that perform a routine or task?

Which of the following cross-site scripting vulnerabilities types is especially harmful because it can be delivered to subsequent users of the application?

What is ColdFusion and which company owns the rights to ColdFusion?

Connecting to an MS SQL Server database with Microsoft's Object Linking and Embedding Database (OLE DB)requires using which of the following providers?

What is ODBC,and how can it be utilized?

Match each item with a statement below. -A technology that developers can use to display HTML documents to users on the fly

Which of the following resources is an excellent starting point for security professionals when investigating VBScript vulnerabilities?

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: the Hidden Threat

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters

Exam 10: Hacking Web Servers

Which of the following is the interface that determines how a Web server passes data to a Web browser?

Which of the following programming languages was originally used primarily on UNIX systems,but is used more widely now on many platforms,such as Macintosh and Windows?

Which of the following application tests analyzes a running application for vulnerabilities?

Match each item with a statement below. -The analysis of a running application for vulnerabilities

Match each item with a statement below. -Open-source server-side scripting language that runs on a server and enables Web developers to create dynamic Web pages

Match each item with a statement below. -The attacker supplies SQL commands when prompted to fill in a Web application field

Which of the following cross-site scripting vulnerabilities types relies on social engineering to trick a user into visiting a maliciously crafted link or URL?

What is the specific act of filtering,rejecting,or sanitizing a user's untrusted input before the application processes it?

Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications,such as Word or Excel,to interact with the Web?

Visual Basic Script (VBScript)is a scripting language developed by which of the following companies?

CGI programs can be written in many different programming and scripting languages,such as C/C++,Perl,UNIX shells,Visual Basic,and FORTRAN.

Match each item with a statement below. -Analysis of an application's source code for vulnerabilities

Which specific type of tag do All CFML tags begin with?

Which JavaScript function is a "method" or sequence of statements that perform a routine or task?

Which of the following cross-site scripting vulnerabilities types is especially harmful because it can be delivered to subsequent users of the application?

What is ColdFusion and which company owns the rights to ColdFusion?

Connecting to an MS SQL Server database with Microsoft's Object Linking and Embedding Database (OLE DB)requires using which of the following providers?

What is ODBC,and how can it be utilized?

Match each item with a statement below. -A technology that developers can use to display HTML documents to users on the fly

Which of the following resources is an excellent starting point for security professionals when investigating VBScript vulnerabilities?

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: the Hidden Threat

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters