Certified Ethical Hacker Ethical Hacker Security 4

Question 1

Which web vulnerability allows an attacker to inject malicious SQL into a query?

Accepted Answer

SQL injection

Answer

XSS

Answer

CSRF

Answer

Clickjacking

Question 2

Stored cross-site scripting (XSS) is dangerous primarily because:

Accepted Answer

The payload persists and affects many users

Answer

It only affects the attacker

Answer

It requires physical access

Answer

It cannot run JavaScript

Question 3

Which attack forces an authenticated user to execute unwanted actions on a web app?

Accepted Answer

CSRF

Answer

SSRF

Answer

IDOR

Answer

RCE

Question 4

What is the best defense against SQL injection?

Accepted Answer

Parameterized queries

Answer

Disabling cookies

Answer

Using HTTP instead of HTTPS

Answer

Longer passwords

Question 5

Which tool is a web server vulnerability scanner that checks for outdated software and misconfigurations?

Accepted Answer

Nikto

Answer

Aircrack-ng

Answer

Hashcat

Answer

Burp Suite

Question 6

An attacker manipulates a URL parameter to access another user's record without authorization. This is:

Accepted Answer

Insecure Direct Object Reference (IDOR)

Answer

Directory traversal

Answer

Session hijacking

Answer

DNS spoofing

Question 7

Which header helps mitigate cross-site scripting by restricting script sources?

Accepted Answer

Content-Security-Policy

Answer

X-Frame-Options

Answer

Cache-Control

Answer

Set-Cookie