Free Security Web Programming Question and Answers

Question 1

Select the TCP port that SSL/TLS for HTTPS communication uses.

Accepted Answer

TCP 443

Answer

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, which encrypts communication between a web browser and a server using SSL/TLS protocols. By convention and standard, HTTPS traffic uses TCP port 443 for secure data transmission. In contrast, unencrypted HTTP traffic typically uses TCP port 80.

Question 2

Recent data loss occurred on a web server that was set up to use TLS with AES-GCM-256, SHA-384, and ECDSA. Select the factor that is MOST likely to be the cause.

Accepted Answer

Poor implementation

Answer

Even when strong cryptographic primitives like AES-GCM-256, SHA-384, and ECDSA are specified, data loss or security breaches can still occur due to poor implementation. This could involve vulnerabilities in the application logic, improper key management, misconfigurations, or human error in setting up and maintaining the system. A robust security posture requires not only strong algorithms but also flawless execution and operational practices.

Question 3

Which hashing algorithm among the following is the LEAST secure?

Accepted Answer

MD5

Answer

MD5 (Message-Digest Algorithm 5) is a cryptographic hash function that has been found to be vulnerable to collision attacks, meaning it's possible to find two different inputs that produce the same hash output. This weakness makes it unsuitable for security-critical applications like password storage or digital signatures, as it can be exploited. While SHA1 also has known weaknesses, MD5 is generally considered the least secure among the listed hashing algorithms for modern security applications.

Question 4

Which of the following would satisfy the multifactor authentication requirements?

Accepted Answer

Fingerprint and Password

Answer

Multifactor authentication (MFA) requires a user to provide two or more distinct types of credentials from different categories to verify their identity. These categories typically include 'something you know' (like a password or PIN), 'something you have' (like a smart card or token), and 'something you are' (like a fingerprint or retina scan). Combining a fingerprint ('something you are') with a password ('something you know') satisfies the requirements for multifactor authentication.

Question 5

Select the statement about system vulnerabilities that is TRUE from the following. i. A system threat is a vulnerability. ii. An exploitable flaw in a system's design is referred to as a vulnerability. iii. Protocols, operating systems, applications, hardware, and system design all have vulnerabilities. iv. Exploits known as vulnerabilities are found in software and hardware products every day.

Accepted Answer

Ii & iii

Answer

A system vulnerability is defined as an exploitable flaw or weakness in a system's design, implementation, or configuration. These vulnerabilities can indeed exist across all layers of a system, including protocols, operating systems, applications, hardware, and the overall system architecture. A system threat, however, refers to an action or event that could exploit such a vulnerability, not the vulnerability itself.

Web Programming Practice Test

Web Programming Practice Test

Free Security Web Programming Question and Answers