What is a good defense against malicious file execution?

Use index values and validate inputs

Which of the following protects against file injection?

Validating uploaded file content

Which of the following is an example of IDOR?

Changing URL from userID=101 to userID=102

What is the function of a reference map?

Translate indexes to real file paths

What could happen if malicious file execution succeeds?

Phishing attacks and site takeover

Which best practice can prevent IDOR?

Use of positive security models

What is Information Leakage?

Providing unnecessary technical details

What is Malicious File Execution?

Executing unauthorized server-side files

What is a secure replacement for direct file references in URLs?

Use random hash or mapped values

What is an Insecure Direct Object Reference (IDOR)?

When user input can access unauthorized resources

studbud

CSF 4103 WEEK 6

20 termsStudBud Administration13 plays

Test your knowledge on common web security vulnerabilities and best practices to protect against them. From Insecure Direct Object References to Malicious File Execution, this quiz covers essential concepts for secure web development.

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
What is a good defense against malicious file execution?
Use index values and validate inputs
Show file names
Allow all file types
Use cookies
2
Which of the following protects against file injection?
Allowing any file types
Using GET methods
Hidden form fields
Validating uploaded file content
3
Which of the following is an example of IDOR?
Changing URL from userID=101 to userID=102
Using encrypted data
Accessing login page
Validating input
4
Why is exposing stack traces a vulnerability?
Slows down the app
Secures sessions
Exposes internal code logic
Improves debugging
5
Why is user input dangerous in file names?
It creates login problems
It may contain malicious paths
It increases page speed
It reduces performance
6
What is a recommended fix for information leakage?
Display all errors
Enable verbose logging
Provide stack trace
Use generic error messages
7
What is the %00 sequence used for in malicious URLs?
To bypass file extensions
To hash data
To redirect users
To close browser
8
What is the function of a reference map?
Translate indexes to real file paths
Display file names
Authenticate users
Create user sessions
9
What could happen if malicious file execution succeeds?
Phishing attacks and site takeover
System shutdown
Faster processing
Better login
10
What does the following code do? < %@ Page Language="C#" %> <% Response.Write(...) %>
Displays login form
Runs client-side JavaScript
Shows HTML page
Executes server-side command
11
Which best practice can prevent IDOR?
Guessable index values
Use of positive security models
Displaying session IDs in URL
Allowing all parameters
12
What is Information Leakage?
Disabling cookies
Encrypting sessions
Blocking users
Providing unnecessary technical details
13
Which is a common source of information leakage?
SSL certificates
Password reset
Debug error messages
Database backups
14
What should users be told after a failed login?
Authentication failed
Username not found
IP address blocked
Wrong password
15
What is Malicious File Execution?
Using safe file types
Running valid scripts
Executing unauthorized server-side files
Compressing files
16
What is a secure replacement for direct file references in URLs?
Use actual file names
Use random hash or mapped values
Allow user choice
Display directory path
17
What can IDOR lead to?
Unauthorized access
Password complexity
Improved performance
Faster sessions
18
What is the purpose of a try/catch block?
Session logging
Output encoding
Input validation
Error handling
19
Which file extension is likely to be abused in a malicious file attack?
.aspx
.txt
.pdf
.jpg
20
What is an Insecure Direct Object Reference (IDOR)?
When objects are referenced by indirect links
When user input can access unauthorized resources
When HTML is used for authentication
When session IDs are expired

CSF 4103 WEEK 6 Flashcards | StudBud

CSF 4103 WEEK 6

20 termsStudBud Administration13 plays

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
What is a good defense against malicious file execution?
Use index values and validate inputs
Show file names
Allow all file types
Use cookies
2
Which of the following protects against file injection?
Allowing any file types
Using GET methods
Hidden form fields
Validating uploaded file content
3
Which of the following is an example of IDOR?
Changing URL from userID=101 to userID=102
Using encrypted data
Accessing login page
Validating input
4
Why is exposing stack traces a vulnerability?
Slows down the app
Secures sessions
Exposes internal code logic
Improves debugging
5
Why is user input dangerous in file names?
It creates login problems
It may contain malicious paths
It increases page speed
It reduces performance
6
What is a recommended fix for information leakage?
Display all errors
Enable verbose logging
Provide stack trace
Use generic error messages
7
What is the %00 sequence used for in malicious URLs?
To bypass file extensions
To hash data
To redirect users
To close browser
8
What is the function of a reference map?
Translate indexes to real file paths
Display file names
Authenticate users
Create user sessions
9
What could happen if malicious file execution succeeds?
Phishing attacks and site takeover
System shutdown
Faster processing
Better login
10
What does the following code do? < %@ Page Language="C#" %> <% Response.Write(...) %>
Displays login form
Runs client-side JavaScript
Shows HTML page
Executes server-side command
11
Which best practice can prevent IDOR?
Guessable index values
Use of positive security models
Displaying session IDs in URL
Allowing all parameters
12
What is Information Leakage?
Disabling cookies
Encrypting sessions
Blocking users
Providing unnecessary technical details
13
Which is a common source of information leakage?
SSL certificates
Password reset
Debug error messages
Database backups
14
What should users be told after a failed login?
Authentication failed
Username not found
IP address blocked
Wrong password
15
What is Malicious File Execution?
Using safe file types
Running valid scripts
Executing unauthorized server-side files
Compressing files
16
What is a secure replacement for direct file references in URLs?
Use actual file names
Use random hash or mapped values
Allow user choice
Display directory path
17
What can IDOR lead to?
Unauthorized access
Password complexity
Improved performance
Faster sessions
18
What is the purpose of a try/catch block?
Session logging
Output encoding
Input validation
Error handling
19
Which file extension is likely to be abused in a malicious file attack?
.aspx
.txt
.pdf
.jpg
20
What is an Insecure Direct Object Reference (IDOR)?
When objects are referenced by indirect links
When user input can access unauthorized resources
When HTML is used for authentication
When session IDs are expired