Security + Lesson 2 Topic C Review

Question 1

Software attacks that target web-based and other client-server applications are called _______.

Accepted Answer

Application attacks

Question 2

Using password-cracking software to attempt every possible alphnumeric password combination.

Accepted Answer

Brute force attack

Question 3

Malicious scripts injected into a trusted web site that elevate permissions.

Accepted Answer

Cross site scripting

Question 4

An attack against software resources designed to disrupt or disable a target system.

Accepted Answer

Software attack

Question 5

An illegitimate user account created to gain access to a computer is known as a _______.

Accepted Answer

Backdoor attack

Question 6

An attack that exploits weaknesses in the mathematical algorithms used to generate hashes.

Accepted Answer

Birthday attack

Question 7

Comparing passwords against a predetermined list of possible password values is a/an ________

Accepted Answer

Dictionary attack

Question 8

An attack that accesses the client side of the application and exploits a server database

Accepted Answer

SQL injection

Question 9

An attack that compares target password hashes to the password hashes stored in a table

Accepted Answer

Rainbow table attack

Question 10

An application attack goes past the destination buffer boundary and corrupts adjacent memory.

Accepted Answer

Buffer overflow

Questions 10