Quiz: Web Threats

Question 1

Using components with known vulnerabilities is a low-risk practice if the vulnerabilities are not widely known.

Accepted Answer

False

Question 2

Storing passwords in plain text is a secure practice.

Accepted Answer

False

Question 3

What is the best practice to mitigate the risk of Cross-Site Request Forgery (CSRF)?

Accepted Answer

Implementing anti-CSRF tokens

Question 4

Which type of vulnerability is exploited when an attacker uploads a malicious file to a web server

Accepted Answer

Unrestricted File Upload

Question 5

Which attack involves manipulating a server into making requests to other systems?

Accepted Answer

Server-Side Request Forgery (SSRF)

Question 6

What does CSRF stand for?

Accepted Answer

Cross-Site Request Forgery

Question 7

Which of these is a common cause of Broken Authentication vulnerabilities?

Accepted Answer

Weak password policies

Question 8

Insecure Deserialization vulnerabilities can allow attackers to execute arbitrary code on a server.

Accepted Answer

True

Question 9

Which OWASP Top 10 threat involves injecting malicious code into a web application?

Accepted Answer

Injection

Question 10

What is the primary purpose of a web application firewall (WAF)?

Accepted Answer

To filter malicious traffic to web applications

Question 11

What is the primary purpose of security logging and monitoring?

Accepted Answer

To detect and respond to security incidents

Question 12

Which attack involves tricking a user into clicking a malicious link?

Accepted Answer

Clickjacking

Question 13

True or False: Using outdated software can increase security risks.

Accepted Answer

True

Question 14

What type of attack exploits XML parsers?

Accepted Answer

XML External Entities (XXE)

Question 15

True or False: SQL Injection can allow attackers to access sensitive data in a database.

Accepted Answer

True

Question 16

Cross-Site Scripting (XSS) can be used to steal user cookies.

Accepted Answer

True

Question 17

Which of the following is a common method to prevent SQL Injection?

Accepted Answer

Using parameterized queries or prepared statements

Question 18

What does the term "Broken Access Control" refer to in the OWASP Top 10?

Accepted Answer

Restrictions on what auth users are allowed to do are not properly enforced

Question 19

ecurity Misconfiguration can occur at any level of an application stack

Accepted Answer

True

Question 20

What does XSS stand for?

Accepted Answer

Cross-Site Scripting

Questions 20