stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
5-1 Daily Review Flashcards | StudBud
Explore
/
5-1 Daily Review
5-1 Daily Review
32 terms
·
StudBud Administration
·
442 plays
-SSgt Devito, 23025 submitted -Covers all of 5-1
Flashcards
32 cards
F
Practice quiz
P
Host live
L
Questions
32
Answers
1
Which attack involves someone intercepting the data being sent between two parties?
XSS
XSRF
Middle Manager Attacks
Man In The Middle Attacks
2
The most common method of tracking a customer accessing an organization's website is...?
Auth Token
MAC Address
Session ID
Cookies
3
The main components of what TLS protocol accomplishes are:
Integrity
Security
Encryption
Verification
Privacy
Authentication
4
What coordinates and maintains communication between nodes on a network?
Protocol
Authentication
Availability
Encryption
5
The best defense against a brute force attack... (Select all)
Using your own Man In The Middle
A long, complex password/auth token
A deep understanding of SSL and TLS
A powerful machine capable of providing resources
None of these are correct
Disabling Javascript
6
What is not a component of TLS?
Integrity
Availability
Authentication
Encryption
7
Encrypted and authenticated data is signed with a ______.
Media Access Controller
Modular Authentication Container
Message Authentication Code
Maintenance Allocation Chart
8
Basic encryption should include, among other things, using ______ with a current certificate
SSH/TLS
SSH
SSL
SSL/TLS
9
What considers the improper implementation of authorization/authentication as second biggest risk to app security?
OWASP
Public Key Cryptography
SSL and TLS
MITM
10
Brute force attacks can be prevented easily using input validation.
False
True
11
Maliciously injecting Javascript into an application is...
MITM
BFA
XSS
XSRF
12
When an attacker "piggybacks" on an active session it is...
XSS
MITM
XSRF
Brute Force
13
SSL is the newer, widely adopted security protocol.
True
False
14
One of the most common uses of TLS is _______.
Securing web traffic
System Security
As ESS
Securing applications
15
What functions comprise session management?
Determine if session needs to restart or terminate
Establish and keep session alive
Synchronize the dialogue
Keep the communication secure
Desaturate the synchronization, secure the data
Prevent data spillage using TLS/SSL
16
XSRF attacks steal auth tokens.
True
False
17
What requires the use of an anti-XSRF token?
Idk they said bring one to the Sablich Center on Tuesday can I go
SSL Encryption
Prevention of MITM attacks
Prevention of XSRF attacks
18
Any website that uses _________ is therefore employing TLS encryption.
HTTP
HTTPS
TFTP
HPPTS
19
The classic model for information security defines what? (Select all)
Accountability, Confidentiality, Integrity
Encryption, Accounting
Integrity
Identification, Integrity
Confidentiality, Availability
Integrity, Authorization
20
The encryption key that utilizes one-way encryption is:
Private Key
Asymmetric Key
Symmetric Key
Public Key
21
What is the type of application security wherein developers test unexpected values or inputs to see what happens?
Fuzzing
Hashing
Brute Forcing
Mumbling
22
What does MAC stand for?
Mandatory Access Control
Mailing Availability Control
Machine Assembly Code
Message Authentication Code
23
Keeping the communication secure, synchronizing the dialogue between two nodes is...
Session Controller
Session Handshake
Session Management
Session ID
24
TLS can encrypt VOIP.
False.
True, though SSL is more known for VOIP.
True.
True, however it cannot offer handshakes.
25
The first step of server security is:
Install software
Install the OS
Plan the Installation
Employ applicable patches
26
This protocol provided a secure encryption communication method for HTTP.
SSL
TCP
SLILS
TSL
27
Select all of the following application security processes.
Encrypt your data
Most Privilege
Least Privilege
Automate
Use pen-testing
Utilize manual processes/do it all by hand
28
Prevention of XSRF attacks typically require the use of an ________.
Authorization Token
Request Token
Anti-XSRF Token
XSRF Token
29
An important consideration in the design of any system receiving communication between a server & client is...
Session Layer
Session Protocol
Session Handshake
Session Management
30
What is essential when securing a server?
Automation
Define The Threats
Mobile Testing
Accounting
31
Inspecting the application page of a service via a browser could supply an attacker with the __________?
Cookies
OWASP
Certificate
Session
32
Devsecops, or the ____ approach, aims to detect security holes from day one.
Right-Shift
Shift-Left
Shift-Right
Left-Shift
