Deck 8: Application Security

Question 1

Operating system hardening is more total work than application hardening.

Answer 1

False

Question 2

The most popular way for hackers to take over hosts today is ________.

A) by taking over the operating system
B) by taking over an application
C) by guessing the root password
D) by taking over the user interface

Answer 2

B

Question 3

Programmers can trust user input if the person is strongly authenticated.

Answer 3

False

Question 4

The user reaches a webpage before logging in. This is a(n) ________ attack.

A) login screen bypass
B) buffer overflow
C) XSS
D) SQL injection attack

Question 5

In a SQL injection attack, attackers may use lookup commands to obtain unauthorized information.

Question 6

When securing application configuration settings, default password settings should not be changed.

Question 7

If a hacker takes over an application program, he or she receives the permissions with which the program runs.

Question 8

An attacker types more data in a field than the programmer expected. This is a(n) ________ attack.

A) denial-of-service
B) directory traversal
C) buffer overflow
D) XSS

Question 9

To prevent eavesdropping, applications should ________.

A) be updating regularly
B) use electronic signatures
C) use encryption for confidentiality
D) use encryption for authentication

Question 10

Generally speaking, vendors use similar mechanisms for downloading and installing patches.

Question 11

The first task in security is to understand the environment to be protected.

Question 12

In a stack overflow attack, to where does the return address point?

A) To the beginning of the stack entry's data area
B) To the end of the stack entry's data area
C) To the next command in the program being hacked
D) To the return address entry in the stack entry

Question 13

Baselines are used to go beyond default installation configurations for high-value targets.

Question 14

Experts advise firms to turn on most or all applications and then harden them.

Question 15

Operating system account passwords provide limited protection.

Question 16

In a(n) ________ attack, the user enters part of a database query instead of giving the expected input.

A) login screen bypass
B) buffer overflow
C) XSS
D) SQL injection attack

Question 17

Overall for firms, which is more time consuming to patch?

A) Applications
B) Operating systems
C) Both are about equally time consuming to patch
D) None of the above

Question 18

In a(n) ________ attack, information that a user enters is sent back to the user in a webpage.

A) login screen bypass
B) buffer overflow
C) XSS
D) SQL injection attack

Question 19

When executing attack code, if the attacker has skillfully overwritten the return address, the return address will not point back to "data" in the buffer.

Question 20

For all applications, a basic rule is ________.

A) always trust user input
B) sometimes trust user input
C) never trust user input
D) None of the above

Question 21

In a URL, ".." (without the quotes) means ________.

A) move one directory up
B) move one directory down
C) move to the operating system's root directory
D) ignore the last entry

Question 22

Developers have permissions on the ________.

A) development server
B) testing server
C) production server
D) Both A and B

Question 23

E-commerce software is not complex and has few subsystems.

Question 24

Accepting cookies is necessary to use many websites.

Question 25

Users usually must click on malicious links in order to execute them.

Question 26

Website defacement occurs when attackers take over a computer and produce false web pages.

Question 27

Whisker is a popular tool for ________.

A) reading website error logs
B) providing a webserver proxy in front of the webserver
C) conducting vulnerability testing on webservers
D) All of the above

Question 28

Java applets are large Java programs.

Question 29

Testers have permissions on the ________.

A) development server
B) testing server
C) production server
D) Both A and B

Question 30

Blind SQL injection uses a series of SQL statements that produce different responses based on true/false questions, or timed responses.

Question 31

Code on a webpage that is executed on the client PC is ________.

A) a Trojan horse
B) a Virus
C) mobile code
D) an XSS attack

Question 32

Which of the following are reasons to ensure WWW Service and E-Commerce security?

A) Cost of disruptions
B) Customer fraud
C) Exposure of sensitive private information
D) All of the above

Question 33

Compared to full programming languages, scripts are ________ in what they can do.

A) more limited
B) less limited
C) about as limited (but easier to use)
D) not limited at all

Question 34

Most firms do a satisfactory job overseeing the deployment of custom programs used to supplement packaged software.

Question 35

Custom programs generally are safe because attackers do not know the code.

Question 36

JavaScript is a scripted form of Java.

Question 37

________ errors may indicate that an attacker is trying to send invalid data to the server.

A) 404
B) 303
C) 500
D) 512

Question 38

Which of the following is the most dangerous because it can do more on a computer when it is executed?

A) Active-X
B) Java
C) Javascript
D) VBscript

Question 39

Cookies can used to track users at a website.

Question 40

Attacks in which a user reaches a directory outside of the WWW root directory and its subdirectories is called a(n) ________ attack.

A) cross-site scripting
B) SQL injection
C) mobile code
D) directory traversal

Question 41

To take advantage of user typing errors, attackers register site names that are similar to those of legitimate domain names.

Question 42

On a compromised computer, if you mistype the name of a URL, you may be taken to a malicious website even if you set your browser security to high.

Question 43

Cookies are dangerous because they ________.

A) allow a website to track what pages you have visited
B) may contain sensitive private information about you
C) Both A and B
D) Neither A nor B

Question 44

PKI uses circles of trust.

Question 45

Encryption is heavily used in commercial e-mail.

Question 46

The prevention of sensitive information from being sent out of a company is called ________.

A) unified threat management
B) antivirus filtering
C) attachment deletion
D) extrusion prevention

Question 47

Under what Internet Options tabs are general security settings for websites controlled?

A) Privacy
B) Security
C) Protection
D) Advanced

Question 48

Which of the following uses a PKI?

A) S/MIME
B) PGP
C) Both A and B
D) Neither A nor B

Question 49

E-mail filtering can be done at which of the following?

A) The user's PC
B) The corporate e-mail servers
C) E-mail managed service providers
D) All of the above

Question 50

Companies are responsible for filtering sexually or racially harassing messages and can be sued for not doing so.

Question 51

Scripts do not have the ability to permanently change your computer registry.

Question 52

In Internet Explorer, the Security tab controls the website's pop-up blocker.

Question 53

Under what Internet Options tabs are cookies controlled?

A) Privacy
B) Security
C) Protection
D) Advanced

Question 54

Which comes third in a VoIP packet?

A) RTP header
B) UDP header
C) IP header
D) codec byte stream

Question 55

Spammers are one reason that some companies have outsourced e-mail filtering.

Question 56

Spammers use sticky spam, which presents their message as a graphical image.

Question 57

A down side of spam filtering is the deletion of some legitimate messages.

Question 58

What e-mail standard provides end-to-end security?

A) SSL/TLS
B) S/MIME
C) Both A and B
D) Neither A nor B

Question 59

With Active-X controls, active scripting is enabled by default.

Question 60

SSL/TLS provides security ________.

A) between the sender and his or her e-mail server
B) all the way between the sender and the receiver
C) Both A and B
D) Neither A nor B

Question 61

A VoIP caller wishing to contact another sends an INVITE message to ________.

A) the caller's H.323 proxy server
B) the receiver's H.323 proxy server
C) the receiver directly
D) None of the above

Question 62

Someone breaks into a corporate VoIP system to place free long-distance and international toll calls. This is referred to by security professionals as ________.

A) toll fraud
B) VoIP hacking
C) phone phreaking
D) blue boxing

Question 63

VoIP security can easily be implemented even if the company's basic security is weak.

Question 64

Which of the following is not a signaling protocol?

A) RTP
B) SIP
C) H.323
D) All of the above ARE signaling protocols.

Question 65

RTP adds ________ to UDP.

A) security
B) sequence numbers
C) Both A and B
D) Neither A nor B

Question 66

SIP Identity protocols ________.

A) ensure that traffic is authenticated between two companies holding public/private keys
B) are uncommon on IP telephones
C) Both A and B
D) Neither A nor B

Question 67

A PSTN gateway translates between a VoIP network's ________ protocols and those of the public switched telephone network.

A) signaling
B) transport
C) Both A and B
D) Neither A nor B

Question 68

SIP proxy servers are used in ________.

A) transport transmissions
B) signaling transmissions
C) Both A and B
D) Neither A nor B

Question 69

Signaling is the carriage of voice between two parties.

Question 70

Eavesdropping can be thwarted by encrypting ________.

A) signaling traffic
B) transport traffic
C) Both A and B
D) Neither A nor B

Question 71

Like the public switched telephone network, VoIP technology is a closed system.

Question 72

Spam over VoIP is called ________.

A) VAM
B) SOVI
C) SPIT
D) SPIP

Question 73

RTP stands for ________.

A) Real Transfer Protocol
B) Real Time Protocol
C) Real Transport Protocol
D) None of the above

Question 74

DoS attacks against VoIP can be successful even if they increase latency only slightly.

Question 75

SIP identity protocols are common on IP telephones.

Question 76

SPIT is where the attacker uses the corporate VoIP network to place free calls.

Question 77

RTP is used in ________.

A) signaling
B) transport
C) Both A and B
D) Neither A nor B

Question 78

Transport consists of communication to manage the network.

Question 79

In VoIP, encryption may ________.

A) reduce throughput
B) increase jitter
C) increase latency
D) make traffic unreadable

Question 80

Signaling does not consist of communication to manage the network.