BSCS Computer Security and Cybersecurity 2

Question 1

What is a SQL injection attack?

Accepted Answer

An attack that inserts malicious SQL code into input fields to manipulate a database

Answer

SQL injection exploits unsanitized input fields by embedding malicious SQL statements that manipulate, expose, or destroy database contents when executed by the server.

Question 2

In public key (asymmetric) cryptography, which key must be kept confidential?

Accepted Answer

The private key

Answer

In asymmetric cryptography, the private key must remain secret while the public key can be freely shared; security depends entirely on the private key's secrecy.

Question 3

What is a firewall's primary function in network security?

Accepted Answer

To monitor and control incoming and outgoing network traffic based on predefined security rules

Answer

A firewall enforces security policies by filtering network traffic according to rules, acting as a gatekeeper between trusted internal networks and untrusted external networks.

Question 4

Which of the following best describes a rainbow table attack?

Accepted Answer

An attack using precomputed hash-to-password mappings to efficiently crack stored password hashes

Answer

A rainbow table attack uses precomputed tables mapping plaintext passwords to their hash values, allowing rapid lookup of a hash's corresponding password without on-the-fly computation.

Question 5

What is the purpose of adding a salt to passwords before hashing?

Accepted Answer

To prepend a unique random value so identical passwords produce different hashes, defeating precomputed attacks

Answer

Salting appends or prepends a unique random value to each password before hashing, ensuring identical passwords yield different hashes and rendering rainbow tables ineffective.

BSCS - Bachelor of Science in Computer Science Practice Test

BSCS - Bachelor of Science in Computer Science Practice Test

BSCS Computer Security and Cybersecurity 2