Cyber Security Application Security

Question 1

What does OWASP stand for?

Accepted Answer

Open Web Application Security Project

Answer

Organized Web Attack Security Protocol

Answer

Online Vulnerability Assessment Security Platform

Answer

Open Wireless Application Security Program

Question 2

Which attack type involves injecting malicious scripts into web pages viewed by other users?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

SQL Injection

Answer

Cross-Site Request Forgery (CSRF)

Answer

Command Injection

Question 3

What is a SQL injection attack?

Accepted Answer

Inserting malicious SQL code into input fields to manipulate database queries

Answer

Flooding a database server with requests to cause downtime

Answer

Encrypting database contents to demand ransom

Answer

Intercepting database traffic between client and server

Question 4

What is Cross-Site Request Forgery (CSRF)?

Accepted Answer

An attack that tricks authenticated users into unknowingly submitting malicious requests

Answer

An attack that injects scripts to steal session cookies

Answer

An attack that forges TLS certificates to intercept traffic

Answer

An attack that exploits weak passwords to access user accounts

Question 5

What is the primary purpose of input validation in application security?

Accepted Answer

To ensure user input conforms to expected formats and reject malicious data

Answer

To improve application performance by caching user data

Answer

To encrypt data before storing it in a database

Answer

To log all user interactions for auditing purposes

Question 6

What is a buffer overflow vulnerability?

Accepted Answer

A flaw where a program writes more data to a buffer than it can hold, overwriting adjacent memory

Answer

A condition where a network buffer becomes congested with too much traffic

Answer

A database error caused by exceeding the maximum field size

Answer

A cryptographic weakness caused by reusing the same encryption key

Question 7

What is the purpose of a Content Security Policy (CSP) header?

Accepted Answer

To restrict which sources browsers may load resources from, mitigating XSS attacks

Answer

To enforce HTTPS connections across a website

Answer

To control which cookies are sent with cross-origin requests

Answer

To rate-limit requests to protect against DDoS attacks