Exam 8: Application Security

________ can be used to track users at a website.

A common type of buffer overflow is the stack overflow.

Compared to full programming languages, scripts ________.

There are some programs that must run with root privileges.

________ is when one user's input can appear on the page of another user.

________ occurs when attackers take over a computer and produce false web pages.

Spam over IP telephony is called ________.

With directory traversal, the path ________ would allow an attacker to download the passwd file in the etc directory (on a Unix computer).

Firms with rigorous deployment policies use all of the following EXCEPT ________ for that purpose.

Which of the following is FALSE about cookies?

Many websites require users to have Active-X turned on.

When someone speaks, a(n) ________ in the VoIP phone converts the voice into a stream of digital bytes.

After a program has been fully tested, it should be moved to a production server.

In the Internet Options dialog box, the ________ tab lets you control what information is released to websites.

Typing URLs with ________ in them can give access to sensitive directories.

Many firms filter incoming e-mail messages and some filter outgoing messages as well.

Under which of the following tabs in the Internet Options dialog box are cookies controlled?

The more popular scripting languages for mobile code are VBScript and JavaScript.

Which of the following is considered quite powerful and can do almost anything on the client machine?

The dynamic nature of Ajax makes it susceptible to malicious code injection.