Cyber - 2.3 Test - Server Exploits

Question 1

Cross-site scripting is where an attacker takes advantage of an interactive web page to insert malicious code into it.

Accepted Answer

True

Question 2

If a website is not using an SSL to encrypt data they send over the network, you should not sign up for that website.

Accepted Answer

True

Question 3

TCP...

Accepted Answer

is used to establish and maintain connections over a computer network.

Question 4

Which query will increase the price of Mountain Bikes by 10%

Accepted Answer

All are true.

Question 5

packet filtering allows or denies packets based on source and destinations addresses, ports, or protocols.

Accepted Answer

True

Question 6

In the table named products, what SQL query will delete all Road Bikes?

Accepted Answer

DELETE FROM products WHERE number <= 102

Question 7

TLS or Transport Layer Security...

Accepted Answer

All are true.

Question 8

How could a SQL-injection exploit a website?

Accepted Answer

By changing data in the website's database.

Question 9

The security measure to protect against XSS exploits.

Accepted Answer

data cleansing

Question 10

In the table named products, what SQL query will insert a new record?

Accepted Answer

INSERT INTO products VALUES (401, 'SleekPaddle', 'Paddle Board', 1350.00);

Question 11

Generally speaking the front-end of a website is the database and the back-end is the user interface.

Accepted Answer

False

Question 12

Packet sniffing...

Accepted Answer

All are true.

Question 13

Which query will return the name of all products that are less than 1000.00?

Accepted Answer

SELECT name FROM products WHERE price < 1000

Question 14

How does a cross-site scripting exploit change a web page?

Accepted Answer

By executing JavaScript that runs in the browser.

Question 15

What port must be open in your AWS Security Group to access a MySQL database?

Accepted Answer

3306

Question 16

What is TCP?

Accepted Answer

Transmission Control Protocol

Question 17

How might you quickly check the status of another host?

Accepted Answer

ping

Question 18

The data portion of the packet...

Accepted Answer

contains actual content of what a person will see - like a text message.

Question 19

Ping of death is overloading a system with too many packets.

Accepted Answer

False

Question 20

A TCP connection is not required to view websites. HTTP is used.

Accepted Answer

False

Question 21

Name the AWS service that provisions databases

Accepted Answer

RDS

Question 22

HTTP is the protocol of the web.

Accepted Answer

True

Question 23

Which is a client-side programming language?

Accepted Answer

JavaScript

Question 24

Routing tables...

Accepted Answer

All are true.

Question 25

Uniform Resource Identifier (URI), is a more general term for URL (Uniform Resource Locater).

Accepted Answer

True

Question 26

A ping flood attack is introducing packets greater than the size routers are designed to handle.

Accepted Answer

False

Question 27

How many rows will be returned by the query: SELECT * FROM products WHERE 1 = 1 OR number = 101

Accepted Answer

4

Question 28

Which is a server-side programming language?

Accepted Answer

PHP

Question 29

AWS Security Groups is a way to filter packets.

Accepted Answer

True

Question 30

You can determine if a website is encrypting its data transmissions by seeing if there is a "lock" in the address bar.

Accepted Answer

True

Question 31

How many columns will be returned by: SELECT * FROM products

Accepted Answer

4

Question 32

What does the "i" in the command ping -i 2 172.30.0.6 do?

Accepted Answer

It sets the interval of pings to be every 2 seconds

Question 33

Which part of the MAC Address 00:22:fa:1c:eb:e6 is the organizationally unique identifier OUI?

Accepted Answer

00:22:fa

Question 34

A Brute Force attack always uses automation to guess usernames and passwords.

Accepted Answer

False

Question 35

How does a hacker exploit a website using SQL injection?

Accepted Answer

All are true.

Question 36

All hardware devices designed to communicate with a network have a MAC address.

Accepted Answer

True

Question 37

Packets must be sent to their destination in a specific order or the data will be corrupted.

Accepted Answer

False

Question 38

An ipv4 header contains...

Accepted Answer

All are true.

Cyber - 2.3 Test - Server Exploits

Questions 38

Cyber - 2.3 Test - Server Exploits

Questions 38