Update Browser Browser Security Updates

Question 1

What is a CVE in the context of browser security updates?

Accepted Answer

A Common Vulnerabilities and Exposures identifier for a specific security flaw

Answer

A browser configuration setting

Answer

A type of browser extension

Answer

A certificate validation error

Question 2

What type of browser vulnerability allows an attacker to run arbitrary code on a victim's computer?

Accepted Answer

Remote Code Execution (RCE)

Answer

Cross-site scripting (XSS)

Answer

SQL injection

Answer

DNS spoofing

Question 3

What does 'browser sandboxing' protect against?

Accepted Answer

Malicious code escaping the browser and affecting the rest of the operating system

Answer

Slow internet connections

Answer

Tracking cookies from websites

Answer

Password theft from saved passwords

Question 4

What is a 'use-after-free' vulnerability that often appears in browser security update notes?

Accepted Answer

A memory corruption bug where freed memory is accessed, potentially allowing code execution

Answer

Using a website after its free trial expires

Answer

Using browser storage after clearing the cache

Answer

Accessing a website after its SSL certificate expires

Question 5

What is a 'drive-by download' attack that browser security updates help prevent?

Accepted Answer

Malware being automatically downloaded and executed when visiting a malicious or compromised website

Answer

Downloading files from untrusted websites voluntarily

Answer

Downloading browser updates from unofficial sources

Answer

A type of ransomware spread through email

Question 6

What US government agency publishes the National Vulnerability Database (NVD) that tracks browser CVEs?

Accepted Answer

NIST (National Institute of Standards and Technology)

Answer

FBI

Answer

NSA

Answer

CISA