Security+ Chapter 14 A-B

What attack involves tricking a browser to submit a spoofed request against a web app that the user is authenticated to?

A software vulnerability that can occur when software does not release allocated memory when finished

A site has good enough input validation that it'll reject certain characters in URLs. What should it check for next?

Which of the following software vulnerabilities occurs when certain events fail to execute in the intended order?

What HTTP method is used to retrieve a resource/page?

What header option mitigates clickjacking, script injection, and other client-side attacks?

What attack inserts an invisible layer into a trusted page that can stealthily intercept & redirect input?

The most secure compiled code is without redundancy/dead code, as well as being clear to follow and analyze.

With ________, a string is stripped of illegal characters and converted to the accepted character set.

A binary package that implements some sort of standard functionality, such as establishing a network connection is a:

While reviewing inputs, you see that a user submitted "' or 1=1-- ". What injection attack were they attempting?

_____ privilege escalation is where a user accesses functionality or data that is intended for another user.

What technique involves sending an application random/unusual input to evaluate how the app responds?

The primary vector for attacking applications is faulty input validation.

Which of the following refers to using pre-built functions to perform a database query?