Deck 15: Web Application Vulnerabilities

Question 1

The protocols upon which the Internet rest are, by nature, secure.

Answer 1

False

Question 2

In 2007 the average time between bringing an unsecured server (or client) onto the Internet, and its being infected by one of the thousands of circulating Internet worms, is less than 2 minutes.

Answer 2

False

Question 3

A set of passwords is better than just one password because even the strongest password can be cracked, given sufficient time.

Answer 3

True

Question 4

The majority of network traffic on the Web is encrypted.

Question 5

It is a proven fact that outsiders perpetrate most computer crimes.

Question 6

HTTP error code ____ means the server is looking for an encryption key from the client or is responding to a bad password entry.

A)400
B)401
C)403
D)408

Question 7

HTTP error code ____ means the client stopped the request before the server finished retrieving it.

A)400
B)401
C)403
D)408

Question 8

The open-source Mambo project is a content management system built on ____.

A)C++
B)Java
C)PHP
D))NET

Question 9

The two most widely used Web server applications are ____ and Microsoft Internet Information Server (IIS).

A)Apache
B)WebSphere
C)Web Zone
D)OpenWeb

Question 10

The ____ dialog in a browser allows you to view the pages you have visited in the last user-defined number of days.

A)bookmarks
B)history file
C)cookies
D)cache

Question 11

____________________ is very complicated and intended to supply the base for all subsequent application layer and presentation layer software.

Question 12

A(n) _________________________ is a neutral zone between the private LAN and the public network of an organization.

Question 13

___________________________________ facilities allow you to monitor all user activity on your private development machine and also to keep a record of Web server logs on a protected machine.

Question 14

The most common source of Web-browser exploits is _________________________.

Question 15

A(n) ____________________ is a small text file, stored on your computer by Web servers, that contains information about the last session when you visited the site.

Question 16

What are some of the factors that lead to vulnerability of data and applications on the Web?

Question 17

What are some of the tools used to exploit Web vulnerability?

Question 18

What are some of the most important Web server vulnerabilities?