stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cyber Security Awareness 3 Flashcards | StudBud
Explore
/
Cyber Security Awareness 3
What is spear phishing?
What is Cross-Site Scripting (XSS)?
Cyber Security Awareness 3
10 terms
·
StudBud Administration
·
40 plays
Imported from external platform
Flashcards
10 cards
F
Practice quiz
P
Host live
L
Questions
10
Answers
1
What is Cross-Site Scripting (XSS)?
A feature of JavaScript
A type of web design
An attack that injects malicious scripts into web page viewed by other user
A new web development framework
2
What is spear phishing?
When hackers use spears to break into corporate buildings and steal data
It’s when hackers use spear guns to protect their servers
A type of phishing attack that targets specific individuals or companies
It’s when hackers target spear fishermen
3
Why should we use secure coding practices?
Because it’s a trend in software development
To make our code run slower
To make our code look more complex and sophisticated
To reduce bugs and vulnerabilities, making our software more secure.
4
What is multi-factor authentication (MFA)?
A type of computer virus
A type of mathematical formula
A new social media platform
An authentication method requiring two or more factors to grant user access
5
What is Cross-Site Request Forgery (CSRF)?
A process of validating user credentials to prevent identity theft.
An attack sending malicious request on behalf of user without their consent
A way to authenticate users using multiple security factors.
A method of encrypting web data to prevent unauthorized access.
6
What is SQL Injection?
A medical procedure for databases
A type of attack that can manipulate SQL queries
A type of database
A new SQL feature
7
What is the principle of least privilege in secure software development?
Giving users only the privileges that they need to perform their work
Giving everyone the same privileges
Giving all users admin rights
Giving no one any privileges
8
What is ‘whaling’?
It’s when hackers go on vacation to go whale watching.
It’s when hackers use whale songs to communicate.
It’s when hackers target the whaling industry.
A phishing attack that targets high-profile individuals, like CEOs or CFOs.
9
What does ‘DLP’ stand for in cybersecurity?
Data Leakage Prevention
Data Loss Prevention
Data Loading Protocol
Data Linkage Protection
10
Why is input validation important in secure software development?
It’s not important
It speeds up the software
It makes the user interface look better
It prevents attacks like XSS, SQL injection, and command injection