Ethical Hacking 9 Web App Security

Apache is software that connects the client with the server using what protocol?

What is true about Cascading Style Sheets (CSS)? (3 answers)

HTTP Headers can be enabled using the following command?

In the Burp Suite Hacking toolbar, this section contains a neat list of all the packages sent and returned.

What tag defines what the document is in HTML5?

What was not an OWASP Top 10 Web Application Security Risks for 2017?

What is the OWASP Top 10?

What server is used mainly as a proxy?

The main format used for the PKI certificate is what, which is the most common certificate type used today?

How can information disclosure be discovered using Apache?

What is not a Web Server?

What are the two main versions of Burp Suite? (2 answers)

Which step of the Handshake Process would the client receives a positive answer from the third party?

What is not included in the basic options of Burp Suite?

What method could an attacker could potentially use it to change information on the server?

In the Burp Suite, to intercept traffic from the attacker's browser, what tab should you select first?

HTML and CSS define the webpage's what?

.pem file format has a Base64 encoded DER cert, enclosed between the tags ALPHA CERTIFICATE and OMEGA CERTIFICATE.

A client-server computer program relies on what? (2 answers)

What is true about XAMPP? (3 answers)

What is a markup language designed to create the visual display in a web browser?

What method could an attacker potentially upload a large file to initiate DDoS?

What HTTP Security Headers would prevent On-Path (MITM) attacks?

Method names, headers, & HTTP are all case-sensitive.

What is true about asymmetric encryption in protocols? (2 answers)

What is an open-source WAF in Apache, that includes features to prevent information disclosure?

What is a web server designed for Windows servers & is considered the second most common web server on the market?

The .css extension allows programmers to define the style of elements only on individual pages.

What is true about the head and /head tags? (2 answers)

The HEAD method asks for a response that is identical to a GET request.

What do Certificate Signing Request (CSR) contain? (3 answers)

What is good about software framework? (2 answers)

What tools generate digital signed certificates? (2 answers)

What computer is responsible for the website logic calculations and for storing sensitive information

What is not true about Open Web Application Security Project (OWASP)?

The Public Key Infrastructure (PKI) produces what, to verify that an entity is indeed who they say they are? (2 answers)

Which HTTP Status Code is Redirection: the server redirects to another URI?

Hypertext Transfer Protocol (HTTP) is a what OSI layer?

What tool in the Burp Suite is used to perform a brute-force attack?

What is not a traffic interception tool ?

What method could an attacker potentially use to gain sensitive information?

The Secure Sockets Layer protocol was developed to add security to web apps.

To implement JavaScript in a webpage, what tags are used?

Before CSS, all font colors, styles, and other design elements had to be explicitly described in HTML.

What is true about JavaScript (3 answers)

What method is this an example of: http://www.example.com/login.php?username=john&password=123123

What is not a language used on the server-side to translate information?

JavaServer Pages are web containers that are also known as what?

The digital certificate guarantees what? (3 answers)