Madanswer Technologies Interview Questions Data|Agile|DevOPs|Python - Recent questions in OWASP Top 10 Vulnerabilities

Client-side scripts can be allowed to execute in the browsers for needed operations.

Sun, 13 Feb 2022 03:18:26 +0000

Client-side scripts can be allowed to execute in the browsers for needed operations.

Select the correct answer from below options

a) True

b) False

Which attack can execute scripts in the user’s browser and is capable of hijacking user sessions, defacing websites or redirecting the user to malicious sites?

Sun, 13 Feb 2022 03:17:51 +0000

Which attack can execute scripts in the user’s browser and is capable of hijacking user sessions, defacing websites or redirecting the user to malicious sites?

Select the correct answer from below options

a) Man in the middle attack

b) Malware Uploading

c) SQL Injection

d) Cross Site Scripting

Which of the following are most likely to result in insecure cryptography?

Sun, 13 Feb 2022 03:17:14 +0000

Which of the following are most likely to result in insecure cryptography?

Select the correct answer from below options

a) Unsalted hash

b) Missing patches

c) New products

What is an attack that exploits the trust a site has in a user’s browser?

Sun, 13 Feb 2022 03:16:34 +0000

What is an attack that exploits the trust a site has in a user’s browser?

Select the correct answer from below options

a) SQL Injection

b) Cross Site Scripting

c) Cross Site Request Forgery

d) Session Hijacking

Role-based access control helps prevent which OWASP Top 10 vulnerability?

Sun, 13 Feb 2022 03:15:48 +0000

Role-based access control helps prevent which OWASP Top 10 vulnerability?

Select the correct answer from below options

a) Security Misconfiguration

b) Unvalidated Redirect or Forward

c) Failure to restrict URL Access

d) Failure to restrict URL Access

What happens when an application takes user inputted data and sends it to a web browser, without proper validation?

Sun, 13 Feb 2022 03:15:02 +0000

What happens when an application takes user inputted data and sends it to a web browser, without proper validation?

Select the correct answer from below options

a) Security Misconfiguration

b) Cross Site Scripting

c) Insecure Direct Object References

d) Broken Authentication and Session Management

What is an attack that forces a user’s session credential or session ID to an explicit value?

Sun, 13 Feb 2022 03:14:12 +0000

What is an attack that forces a user’s session credential or session ID to an explicit value?

Select the correct answer from below options

a) Brute Force Attack

b) Session Fixation

c) Session Hijacking

d) Dictionary Attack

Which of the following languages are the primary targets of cross-site scripting?

Sun, 13 Feb 2022 03:13:36 +0000

Which of the following languages are the primary targets of cross-site scripting?

Select the correct answer from below options

a) SQL

b) Java Script

c) XML Injection

d) XSLT

What is an example of a session-related vulnerability?

Sat, 12 Feb 2022 17:16:32 +0000

What is an example of a session-related vulnerability?

A. Session Hijacking

B. Data Transfer Protocol

C. Security Tracing

D. Session Spoofing

Which threat can be prevented by having unique usernames generated with a high degree of entropy?

Sat, 12 Feb 2022 17:14:42 +0000

Which threat can be prevented by having unique usernames generated with a high degree of entropy?

A. Spamming

B. Authorization Bypass

C. Crypt-analysis of hash values

D. Authentication Bypass

For a connection that changes from HTTP to HTTPS, what flaw arises if you do not change the session identifier?

Sat, 12 Feb 2022 17:12:29 +0000

For a connection that changes from HTTP to HTTPS, what flaw arises if you do not change the session identifier?

A. Cross Site Scripting

B. Session Hijacking

C. Security Misconfiguration

D. Session Replay

What threat arises from not flagging HTTP cookies with tokens, as secure?

Sat, 12 Feb 2022 17:09:18 +0000

What threat arises from not flagging HTTP cookies with tokens, as secure?

A. Session Hijacking

B. Access Control Violation

C. Insecure Cryptographic Storage

D. Session Replay

What attack can be prevented by links or forms that invoke state-changing functions with an unpredictable token for each user?

Sat, 12 Feb 2022 17:08:18 +0000

What attack can be prevented by links or forms that invoke state-changing functions with an unpredictable token for each user?

A. Cross Site Request Forgery

B. Cross Site Tracing

C. OS Commanding

D. Cross Site Scripting

Which of the following actions should you take to verify the implementation of a web application?

Sat, 12 Feb 2022 17:07:03 +0000

Which of the following actions should you take to verify the implementation of a web application?

A. Use policy mechanisms

B. Verify that each URL in your application is appropriately protected

C. Use a simple and positive model at every layer

Which of the following are the best ways to implement transport layer protection?

Sat, 12 Feb 2022 17:04:35 +0000

Which of the following are the best ways to implement transport layer protection?

A. Both IPSec & SSL Enable

B. Install IDS

C. Set the HttpOnly flag on session ID cookies

D. Enable IPSec

E. Enable SSL

In which of the following scenarios should you use the escaping technique?

Sat, 12 Feb 2022 17:02:59 +0000

In which of the following scenarios should you use the escaping technique?

A. When you need to tell the interpreter that input is data and not code

B. When you need to validate any input as valid input

C. When you are trying to protect against regular expression injection

What happens when an application takes user inputted data, and sends it to a web browser without proper validation and escaping?

Sat, 12 Feb 2022 17:01:33 +0000

What happens when an application takes user inputted data, and sends it to a web browser without proper validation and escaping?

A. Cross Site Scripting

B. Broken Authentication and Session Management

C. Insecure Direct Object References

D. Security Misconfiguration

Which of the following depict the typical impact of failure to restrict URL access?

Sat, 12 Feb 2022 16:59:51 +0000

Which of the following depict the typical impact of failure to restrict URL access?

A. Attackers impersonate any user on the system

B. Attackers access other users accounts and data

C. Broken Authentication and Session Management

What is the attack technique used to exploit websites by altering the backend database queries through inputting manipulated queries?

Sat, 12 Feb 2022 16:57:54 +0000

What is the attack technique used to exploit websites by altering the backend database queries through inputting manipulated queries?

A. LDAP Injection

B. SQL Injection

C. OS Commanding

D. XML Injection

What flaw arises from session tokens having poor randomness across a range of values?

Sat, 12 Feb 2022 16:56:25 +0000

What flaw arises from session tokens having poor randomness across a range of values?

A. Session Replay

B. Session Fixation

C. Insecure Direct Object References

D. Session Hijacking

Which of the following consequences are most likely to occur due to an injection attack?

Sat, 12 Feb 2022 16:54:41 +0000

Which of the following consequences are most likely to occur due to an injection attack?

A. Denial of service

B. Spoofing

C. Data loss

Which of the following are the best ways to protect against injection attacks?

Sat, 12 Feb 2022 16:53:02 +0000

Which of the following are the best ways to protect against injection attacks?

A. Memory size checks

B. Escaping

C. Validate integer values before referencing arrays

What type of flaw occurs when untrusted user-entered data is sent to the interpreter as part of a query or command?

Sat, 12 Feb 2022 16:49:13 +0000

What type of flaw occurs when untrusted user-entered data is sent to the interpreter as part of a query or command?

A. Cross Site Request Forgery

B. Insecure Direct Object References

C. Injection

D. Insufficient Transport Layer Protection

E. Improper Authentication