Which of the following best describes SQL Injection?

A method to manipulate SQL queries.

Which of the following best describes Remote File Inclusion (RFI)?

Executing a script to inject a remote file into the web app or website.

What is a key difference between SSDLC and traditional SDLC?

SSDLC ensures security is integrated from the start

What is a common risk associated with using End-of-Life or outdated components in applications?

Exposure to unpatched vulnerabilities.

What is Cross-Site Request Forgery (XSRF/CSRF)?

An attack that forces a user to execute unwanted actions on a web app.

What is the XML External Entity (XXE) attack primarily known for?

Embedding requests for local resources.

What is the primary benefit of employing strong authentication methods in web applications?

To ensure that only authorized users can access sensitive resources.

Which of the following is a major risk factor that Credential Stuffing exploits?

Reusing credentials across multiple accounts

What is a primary goal of data poisoning in AI systems?

To manipulate output by introducing maliciously crafted data.

What is Cookie Poisoning?

The modification of a cookie's content.

studbud

CySA+ Lesson 14

20 termsStudBud Administration14 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
Which type of XSS involves storing malicious code in a web application's database?
Persistent/Stored XSS
Buffer Overflow
Reflected XSS
DOM-based XSS
2
Which of the following best describes SQL Injection?
A technique for encrypting SQL databases.
A method to manipulate SQL queries.
A strategy for optimizing SQL query performance.
A way to secure SQL databases from unauthorized access.
3
Which attack mitigation checklist item focuses on the prevention of unauthorized access to resources and data?
Remote Code Execution
Broken Access Control
Cryptographic Failures
Insecure Design
4
Which of the following best describes Remote File Inclusion (RFI)?
Using directory traversal to navigate through the server’s file structure.
Executing a script to inject a remote file into the web app or website.
Encrypting server communications to prevent unauthorized access.
Injecting a local file into the server's web application.
5
What is a key difference between SSDLC and traditional SDLC?
SSDLC focuses only on testing
Traditional SDLC includes security at every stage
Traditional SDLC includes security at every stage
SSDLC ensures security is integrated from the start
6
What is Directory Traversal also known as?
Buffer Overflow
File Path Traversal
SQL Injection
URL Encoding
7
Which of the following best describes an On-Path Attack?
Phishing
Man-in-the-Middle
Denial of Service
Buffer Overflow
8
What is a common risk associated with using End-of-Life or outdated components in applications?
Access to enhanced security features.
Exposure to unpatched vulnerabilities.
Increased application performance.
Simplified maintenance processes.
9
Which SQL wildcard character is commonly used to perform partial matches on text data?
*
%
_
#
10
What is Cross-Site Request Forgery (XSRF/CSRF)?
A method of encrypting session data to prevent unauthorized access.
An attack that forces a user to execute unwanted actions on a web app.
A tool used to scan for web app vulnerabilities.
A firewall rule designed to block cross-site scripting attacks.
11
What is the XML External Entity (XXE) attack primarily known for?
Embedding requests for local resources.
Protecting XML files from unauthorized access.
Encrypting XML data to secure communication.
Utilizing encoded entities to consume host memory.
12
What can a heap overflow potentially lead to?
Reduced memory usage
Improved data security
Enhanced program performance
Overwriting of variables
13
What mitigation approach is best suited for addressing weaknesses in the encryption and protection of data?
Insecure Design
Privilege Escalation
Security Misconfiguration
Cryptographic Failures
14
What is the primary benefit of employing strong authentication methods in web applications?
To regularly update software with the latest patches.
To ensure that only authorized users can access sensitive resources.
To provide continuous monitoring of application performance.
To encrypt data in transit to protect confidentiality.
15
Which of the following is a major risk factor that Credential Stuffing exploits?
Slow network connections
Two-factor authentication
Reusing credentials across multiple accounts
Frequent software updates
16
Which of the following attacks disguises communication from an unknown source as being from a known, trusted source?
Data Tampering
SQL Injection
XML Bomb
Spoofing
17
What is a primary goal of data poisoning in AI systems?
To test the robustness of AI models under various conditions.
To encrypt training data for security purposes.
To improve system performance by introducing diverse data sets.
To manipulate output by introducing maliciously crafted data.
18
What is Cookie Poisoning?
The modification of a cookie's content.
The use of expired cookies to access web applications.
The use of cookies for session tracking.
The removal of cookies after a session ends.
19
What is a primary countermeasure for detecting tampered cookies in web applications?
Input validation
Cookie rotation
Using multiple session IDs
Data obfuscation
20
Which security practice is essential for identifying and addressing software vulnerabilities before they are exploited?
Strong Authentication
Patching
Input Validation
Continuous Improvement

CySA+ Lesson 14 Flashcards | StudBud