B.S.W.E. Bachelor of Software Engineering Computer Networks & Security 2 — Questions and Answers
Question 1: What is a SQL injection attack?
- Injecting malware into a SQL Server installation
- Inserting malicious SQL code into an input field to manipulate or exploit a database (Correct answer)
- Overloading a database server with excessive queries
- Intercepting SQL queries in transit over the network
Correct answer: Inserting malicious SQL code into an input field to manipulate or exploit a database
SQL injection occurs when an attacker inserts malicious SQL statements into an input field that is directly incorporated into a database query, allowing unauthorized data access or manipulation.
Question 2: What does HTTPS provide that HTTP does not?
- Faster data transfer speeds
- Encrypted communication using TLS, ensuring confidentiality and integrity (Correct answer)
- Stateful connections between client and server
- Compression of transmitted data
Correct answer: Encrypted communication using TLS, ensuring confidentiality and integrity
HTTPS uses TLS (Transport Layer Security) to encrypt data in transit, preventing eavesdropping, tampering, and ensuring the authenticity of the server.
Question 3: What is a firewall in network security?
- Software that detects and removes viruses from a computer
- A network security device or software that monitors and controls incoming and outgoing traffic based on defined rules (Correct answer)
- An encryption tool for securing data at rest
- A tool for scanning network vulnerabilities
Correct answer: A network security device or software that monitors and controls incoming and outgoing traffic based on defined rules
A firewall enforces a security policy by filtering network traffic based on rules, blocking unauthorized access while allowing legitimate communication.
Question 4: Which attack involves overwhelming a server with traffic to make it unavailable to legitimate users?
- Man-in-the-Middle attack
- Phishing attack
- Denial-of-Service (DoS) attack (Correct answer)
- Cross-Site Scripting (XSS)
Correct answer: Denial-of-Service (DoS) attack
A DoS (Denial-of-Service) attack floods a target server with excessive requests, exhausting its resources and making it unavailable to legitimate users.
Question 5: What is Cross-Site Scripting (XSS)?
- An attack that redirects users from one website to a malicious clone
- A vulnerability where an attacker injects malicious scripts into web pages viewed by other users (Correct answer)
- A technique for bypassing SSL certificate validation
- A method for stealing HTTP session cookies via network sniffing
Correct answer: A vulnerability where an attacker injects malicious scripts into web pages viewed by other users
XSS allows attackers to inject malicious client-side scripts into web pages, which execute in victims' browsers to steal cookies, session tokens, or perform actions on the user's behalf.
Question 6: What is the purpose of a VPN (Virtual Private Network)?
- To accelerate internet browsing by caching web pages
- To create an encrypted tunnel over a public network, enabling secure private communication (Correct answer)
- To assign static IP addresses to network devices
- To provide wireless network access in public areas
Correct answer: To create an encrypted tunnel over a public network, enabling secure private communication
A VPN creates an encrypted connection (tunnel) over the internet, allowing remote users to securely access a private network as if they were physically connected to it.
B.S.W.E. Bachelor of Software Engineering Computer Networks & Security 2
What is a SQL injection attack?