CIW CIW Security Analyst 2

Question 1

What is SQL injection?

Accepted Answer

An attack that inserts malicious SQL code into input fields to manipulate a database

Answer

A method of speeding up SQL queries

Answer

A database backup technique

Answer

A type of stored procedure

Question 2

What does XSS (Cross-Site Scripting) allow an attacker to do?

Accepted Answer

Inject malicious scripts into web pages viewed by other users

Answer

Break server encryption keys

Answer

Perform brute-force password cracking

Answer

Intercept DNS requests

Question 3

What is a VPN (Virtual Private Network) used for?

Accepted Answer

Create an encrypted tunnel over the internet to secure data transmission and mask IP addresses

Answer

Host websites from a home computer

Answer

Speed up web browsing

Answer

Block pop-up advertisements

Question 4

What is the principle of least privilege in security?

Accepted Answer

Grant users only the minimum permissions necessary to perform their job functions

Answer

Give all users administrator rights to improve productivity

Answer

Allow privileged users to bypass security controls

Answer

Restrict access only to executives

Question 5

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more verification factors (something you know, have, or are) to authenticate

Answer

Using multiple passwords for one account

Answer

Logging in from multiple devices simultaneously

Answer

Using the same password across multiple sites

Question 6

What is a brute-force attack in the context of cybersecurity?

Accepted Answer

Systematically trying all possible password combinations until the correct one is found

Answer

Physically breaking into a server room

Answer

Overloading a server with network requests

Answer

Social engineering via phone calls