Question 1

The design flaw in ActiveX is that ActiveX can do anything the user can do.

Accepted Answer

A) True 
 B)False  True

Question 2

____________________, Microsoft's answer to Netscape's JavaScript language, is loosely based on the Visual Basic programming language, but is much simpler.

Accepted Answer

VBScript

Question 3

____________________ controls are Component Object Model (COM) objects that can be embedded in a variety of applications.

Accepted Answer

ActiveX

Question 4

SSL encrypts the session, as well as the data that is being used in the session, using ____.

Accepted Answer

A) PKI 
B) VPN 
C) TLS 
D) HTTPS 
A) PKI 
B) VPN 
C) TLS 
D) HTTPS

Question 5

______________________________ is the most basic script used to develop Web pages and uses a set of markup tags, such as  , to define the structure of Web pages.

Accepted Answer

Hypertext Markup Lan

Question 6

How can attackers use ActiveX to modify resources on an implementation of Windows?

Accepted Answer

Attackers can use ActiveX to modify reso

Question 7

During the early days of the Internet, most Web pages were static HTML, so programming exploits could only be aimed at the client-side browsers.

Accepted Answer

A) True 
 B)False

Question 8

HTML is a dynamic language, and can be executed successfully outside a Web browser.

Accepted Answer

A) True 
 B)False

Question 9

The ____ vulnerability exploits an unchecked buffer in Internet Explorer processing HTML elements such as FRAME and IFRAME elements.

Accepted Answer

A) phishing 
B) buffer overflow 
C) HTML e-mail 
D) remote access 
A) phishing 
B) buffer overflow 
C) HTML e-mail 
D) remote access

Question 10

One of the least common exploits used on the Internet is a buffer overflow.

Accepted Answer

A) True 
 B)False

Question 11

Up until ____, when Microsoft issued the patch that disables autoplay of ActiveX controls, ActiveX was becoming a widespread way to perform surreptitious installation of spyware and adware on Windows machines.

Accepted Answer

A) 2000 
B) 2001 
C) 2003 
D) 2006 
A) 2000 
B) 2001 
C) 2003 
D) 2006

Question 12

What is the difference between a script and a programming language?

Accepted Answer

The difference between a scrip

Question 13

Secure transfer of data has been made available by protocols such as ____.

Accepted Answer

A) FTP 
B) HTTP 
C) SSL 
D) TCP 
A) FTP 
B) HTTP 
C) SSL 
D) TCP

Question 14

What security measures regarding ActiveX should you take if you are running Windows 2000 or Windows XP?

Accepted Answer

If you are running Windows 2000, make su

Question 15

_________________________ are the defects in various programming languages that are used to develop server-side and client-side applications.

Accepted Answer

Programmin

Question 16

Java is designed to run in a platform-independent manner using _________________________ installed on the client computer as its sandbox.

Accepted Answer

Java Runtime Environ

Question 17

____ controls are stand-alone compiled applications designed to make it possible to link and allow interactions between variously developed applications.

Accepted Answer

A) ActiveX 
B) Applets 
C) Java widgets 
D) VBScript 
A) ActiveX 
B) Applets 
C) Java widgets 
D) VBScript

Question 18

The COM architecture was first released with Windows XP.

Accepted Answer

A) True 
 B)False

The design flaw in ActiveX is that ActiveX can do anything the user can do.

____________________, Microsoft's answer to Netscape's JavaScript language, is loosely based on the Visual Basic programming language, but is much simpler.

____________________ controls are Component Object Model (COM) objects that can be embedded in a variety of applications.

SSL encrypts the session, as well as the data that is being used in the session, using ____.

______________________________ is the most basic script used to develop Web pages and uses a set of markup tags, such as , to define the structure of Web pages.

How can attackers use ActiveX to modify resources on an implementation of Windows?

During the early days of the Internet, most Web pages were static HTML, so programming exploits could only be aimed at the client-side browsers.

HTML is a dynamic language, and can be executed successfully outside a Web browser.

The ____ vulnerability exploits an unchecked buffer in Internet Explorer processing HTML elements such as FRAME and IFRAME elements.

One of the least common exploits used on the Internet is a buffer overflow.

Up until ____, when Microsoft issued the patch that disables autoplay of ActiveX controls, ActiveX was becoming a widespread way to perform surreptitious installation of spyware and adware on Windows machines.

What is the difference between a script and a programming language?

Secure transfer of data has been made available by protocols such as ____.

What security measures regarding ActiveX should you take if you are running Windows 2000 or Windows XP?

_________________________ are the defects in various programming languages that are used to develop server-side and client-side applications.

Java is designed to run in a platform-independent manner using _________________________ installed on the client computer as its sandbox.

____ controls are stand-alone compiled applications designed to make it possible to link and allow interactions between variously developed applications.

The COM architecture was first released with Windows XP.

Ethics of Hacking and Cracking

Reconnaissance

Scanning Tools

Sniffers

TCP/IP Vulnerabilities

Encryption and Password Cracking

Spoofing

Session Hijacking

Hacking Network Devices

Trojan Horses

Denial-Of-Service Attacks

Buffer Overflows

Mail Vulnerabilities

Web Application Vulnerabilities

Windows Vulnerabilities

Unix/Linux Vulnerabilities

Incident Handling

Filters

Exam 13: Programming Exploits

The design flaw in ActiveX is that ActiveX can do anything the user can do.

____________________, Microsoft's answer to Netscape's JavaScript language, is loosely based on the Visual Basic programming language, but is much simpler.

____________________ controls are Component Object Model (COM) objects that can be embedded in a variety of applications.

SSL encrypts the session, as well as the data that is being used in the session, using ____.

______________________________ is the most basic script used to develop Web pages and uses a set of markup tags, such as , to define the structure of Web pages.

How can attackers use ActiveX to modify resources on an implementation of Windows?

During the early days of the Internet, most Web pages were static HTML, so programming exploits could only be aimed at the client-side browsers.

HTML is a dynamic language, and can be executed successfully outside a Web browser.

The ____ vulnerability exploits an unchecked buffer in Internet Explorer processing HTML elements such as FRAME and IFRAME elements.

One of the least common exploits used on the Internet is a buffer overflow.

Up until ____, when Microsoft issued the patch that disables autoplay of ActiveX controls, ActiveX was becoming a widespread way to perform surreptitious installation of spyware and adware on Windows machines.

What is the difference between a script and a programming language?

Secure transfer of data has been made available by protocols such as ____.

What security measures regarding ActiveX should you take if you are running Windows 2000 or Windows XP?

_________________________ are the defects in various programming languages that are used to develop server-side and client-side applications.

Java is designed to run in a platform-independent manner using _________________________ installed on the client computer as its sandbox.

____ controls are stand-alone compiled applications designed to make it possible to link and allow interactions between variously developed applications.

The COM architecture was first released with Windows XP.

Ethics of Hacking and Cracking

Reconnaissance

Scanning Tools

Sniffers

TCP/IP Vulnerabilities

Encryption and Password Cracking

Spoofing

Session Hijacking

Hacking Network Devices

Trojan Horses

Denial-Of-Service Attacks

Buffer Overflows

Mail Vulnerabilities

Web Application Vulnerabilities

Windows Vulnerabilities

Unix/Linux Vulnerabilities

Incident Handling

Filters