Security+ Chapter 14

What attack involves tricking a browser to submit a spoofed request against a web application?

Chose two correct statements on the differences between compiled and interpreted codes:

What header option mitigates clickjacking, script injection, and other client-side attacks?

What technique involves sending an application random/unusual input to evaluate how the app responds?

What HTTP method is used to retrieve a resource/page?

What type of malicious activity involves a mechanism that restarts a backdoor if the host reboots or the user logs off?

What refers to the system's ability to handle changes in demand in real time?

Which of the following would not have macros?

__________ is the process of deploying an application to the target environment.

_____ privilege escalation is where a user accesses functionality or data that is intended for another user.

The primary vector for attacking applications is faulty input validation.

A binary package that implements some sort of standard functionality, such as establishing a network connection is a:

Which of the following software vulnerabilities occurs when certain events fail to execute in the intended order?

A site has good enough input validation that it'll reject certain characters in URLs. What should it check for next?

A software vulnerability that can occur when software does not release allocated memory when finished

What's the general process of deciding what software or scripts may be installed/run on a host?

While reviewing inputs, you see that a user submitted "' or 1=1-- ". What injection attack were they attempting?

What python statement would a logic-bomb most likely use?

With ________, a string is stripped of illegal characters and converted to the accepted character set.

The most secure compiled code is without redundancy/dead code, as well as being clear to follow and analyze.

What principle involves developers committing/testing coding updates early and often?

Which of the following refers to using pre-built functions to perform a database query?

What attack inserts an invisible layer into a trusted page that can stealthily intercept & redirect input?

You see a code file that has the line " Get-Process | Where { $_.name -eq 'nmap' } ". What language is this in?