Question 1

Explain the approach attackers use against DNS servers.

Accepted Answer

Instead of attempting to break into a DN

Question 2

The default root directory of the Microsoft Internet Information Services (IIS) Web server is ____.

Accepted Answer

A)  /var/www 
B)  C:\Inetpub\ wwwroot 
C)  /var/html 
D)  /etc/var/www 
A)  /var/www 
B)  C:\Inetpub\ wwwroot 
C)  /var/html 
D)  /etc/var/www

Question 3

The SQL injection statement ____ determines the names of different fields in a database.

Accepted Answer

A)  whatever AND email IS NULL; -- 
B)  whatever; AND email IS NULL; -- 
C)  whatever" AND email IS NULL; -- 
D)  whatever' AND email IS NULL; -- 
A)  whatever AND email IS NULL; -- 
B)  whatever; AND email IS NULL; -- 
C)  whatever" AND email IS NULL; -- 
D)  whatever' AND email IS NULL; --

Question 4

The SQL injection statement ____ finds specific users.

Accepted Answer

A)  whatever' OR full_name = '%Mia%' 
B)  whatever' OR full_name IS '%Mia%' 
C)  whatever' OR full_name LIKE '%Mia%' 
D)  whatever' OR full_name equals '%Mia%' 
A)  whatever' OR full_name = '%Mia%' 
B)  whatever' OR full_name IS '%Mia%' 
C)  whatever' OR full_name LIKE '%Mia%' 
D)  whatever' OR full_name equals '%Mia%'

Question 5

A(n) ____________________ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.

Accepted Answer

The answer of A(n) ____________________ is a method for adding...

Question 6

What does a user need to perform a directory traversal attack?

Accepted Answer

To perform a directory travers

Question 7

____ is a language used to view and manipulate data that is stored in a relational database.

Accepted Answer

A)  C 
B)  DQL 
C)  SQL 
D)  ISL 
A)  C 
B)  DQL 
C)  SQL 
D)  ISL

Question 8

Why would you want to limit access to the root directory of a Web server?

Accepted Answer

Limiting access to the root di

Question 9

When TCP/IP was developed, the host table concept was expanded to a hierarchical name system for matching computer names and numbers known as the ____.

Accepted Answer

A)  HTTP 
B)  NSDB 
C)  URNS 
D)  DNS 
A)  HTTP 
B)  NSDB 
C)  URNS 
D)  DNS

Question 10

The predecessor to today's Internet was a network known as ____________________.

Accepted Answer

The answer of The predecessor to today's Internet was a...

Question 11

Explain the HTTP header referrer attack.

Accepted Answer

Because some Web sites check the Referer

Question 12

A(n) ____________________ cookie is stored in Random Access Memory (RAM), instead of on the hard drive, and only lasts for the duration of visiting the Web site.

Accepted Answer

The answer of A(n) ____________________ cookie is stored in Random...

Question 13

The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.

Accepted Answer

A)  DNS spooking 
B)  DNS poisoning 
C)  DNS bonding 
D)  DNS blacklisting 
A)  DNS spooking 
B)  DNS poisoning 
C)  DNS bonding 
D)  DNS blacklisting

Question 14

The SQL injection statement ____ erases the database table.

Accepted Answer

A)  whatever'; DROP TABLE members; -- 
B)  whatever'; DELETE TABLE members; -- 
C)  whatever'; UPDATE TABLE members; -- 
D)  whatever'; RENAME TABLE members; -- 
A)  whatever'; DROP TABLE members; -- 
B)  whatever'; DELETE TABLE members; -- 
C)  whatever'; UPDATE TABLE members; -- 
D)  whatever'; RENAME TABLE members; --

Question 15

For a Web server's Linux system, the default root directory is typically ____.

Accepted Answer

A)  /var/www 
B)  C:\inetpub\wwwroot 
C)  /var/root 
D)  /home/root 
A)  /var/www 
B)  C:\inetpub\wwwroot 
C)  /var/root 
D)  /home/root

Question 16

____ is for the transport and storage of data, with the focus on what the data is.

Accepted Answer

A)  XML 
B)  HTML 
C)  SGML 
D)  SML 
A)  XML 
B)  HTML 
C)  SGML 
D)  SML

Question 17

The ____________________ directory is a specific directory on a Web server's file system.

Accepted Answer

The answer of The ____________________ directory is a specific directory...

Question 18

All Web traffic is based on the ____________________ protocol.

Accepted Answer

The answer of All Web traffic is based on the...

Question 19

The ____ is part of an HTTP packet that is composed of fields that contain the different characteristics of the data being transmitted.

Accepted Answer

A)  HTTP header 
B)  HTML header 
C)  XML header 
D)  SSL header 
A)  HTTP header 
B)  HTML header 
C)  XML header 
D)  SSL header

Question 20

The "omnipresence" of access from any computer with only an Internet connection and a Web browser has made Web applications an essential element of organizations today.

Accepted Answer

A) True 
 B)False

Explain the approach attackers use against DNS servers.

The default root directory of the Microsoft Internet Information Services (IIS) Web server is ____.

The SQL injection statement ____ determines the names of different fields in a database.

The SQL injection statement ____ finds specific users.

A(n) ____________________ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.

What does a user need to perform a directory traversal attack?

____ is a language used to view and manipulate data that is stored in a relational database.

Why would you want to limit access to the root directory of a Web server?

When TCP/IP was developed, the host table concept was expanded to a hierarchical name system for matching computer names and numbers known as the ____.

The predecessor to today's Internet was a network known as ____________________.

Explain the HTTP header referrer attack.

A(n) ____________________ cookie is stored in Random Access Memory (RAM), instead of on the hard drive, and only lasts for the duration of visiting the Web site.

The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.

The SQL injection statement ____ erases the database table.

For a Web server's Linux system, the default root directory is typically ____.

____ is for the transport and storage of data, with the focus on what the data is.

The ____________________ directory is a specific directory on a Web server's file system.

All Web traffic is based on the ____________________ protocol.

The ____ is part of an HTTP packet that is composed of fields that contain the different characteristics of the data being transmitted.

The "omnipresence" of access from any computer with only an Internet connection and a Web browser has made Web applications an essential element of organizations today.

Introduction to Security

Malware and Social Engineering Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Access Control Fundamentals

Authentication and Account Management

Basic Cryptography

Advanced Cryptography

Business Continuity

Risk Mitigation

Filters

Exam 3: Application and Network Attacks

Explain the approach attackers use against DNS servers.

The default root directory of the Microsoft Internet Information Services (IIS) Web server is ____.

The SQL injection statement ____ determines the names of different fields in a database.

The SQL injection statement ____ finds specific users.

A(n) ____________________ is a method for adding annotations to the text so that the additions can be distinguished from the text itself.

What does a user need to perform a directory traversal attack?

____ is a language used to view and manipulate data that is stored in a relational database.

Why would you want to limit access to the root directory of a Web server?

When TCP/IP was developed, the host table concept was expanded to a hierarchical name system for matching computer names and numbers known as the ____.

The predecessor to today's Internet was a network known as ____________________.

Explain the HTTP header referrer attack.

A(n) ____________________ cookie is stored in Random Access Memory (RAM), instead of on the hard drive, and only lasts for the duration of visiting the Web site.

The Chinese government uses _____ to prevent Internet content that it considers unfavorable from reaching its citizenry.

The SQL injection statement ____ erases the database table.

For a Web server's Linux system, the default root directory is typically ____.

____ is for the transport and storage of data, with the focus on what the data is.

The ____________________ directory is a specific directory on a Web server's file system.

All Web traffic is based on the ____________________ protocol.

The ____ is part of an HTTP packet that is composed of fields that contain the different characteristics of the data being transmitted.

The "omnipresence" of access from any computer with only an Internet connection and a Web browser has made Web applications an essential element of organizations today.

Introduction to Security

Malware and Social Engineering Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Access Control Fundamentals

Authentication and Account Management

Basic Cryptography

Advanced Cryptography

Business Continuity

Risk Mitigation

Filters