Which one of the following is an example of phishing?

An email directing the recipient to download an attachment., Email directing to enter personal details on a fake website.

Which one of the following describes spam?

Sending unwanted bulk messages.

Which one of the following describes a computer hacker?

Unauthorized user who secretly invades computer for damage

studbud

Security 2

10 termsStudBud Administration60 plays

Layer Security

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Why big companies do not innovate
not interested
take over small companies
Lack of time
do not have resources
2
What are the benefits of following the proper SDLC and building security in from the beginning?
All of the above
Fewer 'gotchas' in pre-production testing and deployment
More reliable software
Decreased development costs
3
What key is used by a web browser when verifying the digital certificate presented by a website
Server's public key
CA's public key
CA's private key
Server's private key
4
Which character is the most critical portion of a SQL injection attack?
!
*
'
#
5
Which one of the following is an example of phishing?
An email directing the recipient to download an attachment.
An email directing the recipient to forward the email.
Email directing to enter personal details on a fake website.
An email warning the recipient of a computer virus threat.
6
What is "black box" testing not intended to do?
Scan source code for coding errors.
Test weaknesses to gauge the potential for exploit.
Identify weaknesses in production applications.
All of the above
7
Which one of the following describes spam?
Gathering information about someone without their knowledge.
performing an unauthorized malicious action
Putting an unnecessary load on the network by making copies.
Sending unwanted bulk messages.
8
Which one of the following describes a computer hacker?
Unauthorized user who secretly invades computer for damage
an authorized user who access and exploit files available
A skilled programmer who writes programs to train employees
A skilled programmer who helps in the installation of s/w
9
Which of the following controls is NOT a reasonable way to address SQL injection vulnerability?
Use parameterized queries
Upgrade the database version
Rewriting the web application
Use stored procedures
10
Which one of the following can protect a computer from the risk of unwanted emails?
Anti-spyware software.
PC diagnostic software
Anti-spam software.
Anti-virus software.

Security 2 Flashcards | StudBud