Browse Definitions:
Quiz

Quiz: Web server security

Web server security school
[SearchSecurity.com]

Web security has a language all its own. How well do you speak it?

1. Which of the following statements is true about script kiddies?
a. They target specific organizations.
b. They scan specific systems for specific weaknesses.
c. They use subtle and varied tactics.
d. They may use your system to scan or exploit other systems.
e. The number of network attacks does not increase during school holidays.
Answer

2. Your Web server should be placed in a DMZ because __________?
a. It will be safe from attack.
b. It won't be able to access the Internet otherwise.
c. It locates it on a different subnet than your intranet.
d. It is easier to wire it to the Internet.
e. It has to trust traffic coming from the Internet.
Answer

3. Phishing differs from adware and spyware because __________?
a. It is not a problem for organizations but individuals.
b. It installs malicious software on your PC.
c. It uses social engineering and technical subterfuge whereas the other two do not.
d. It is easier to stop.
e. None of the above.
Answer

4. True or False: Client-side validation of form data is the same as server-validation except that it happens on the client's machine.
Answer

5. Internet Explorer divides the Internet into zones so that you can assign a Web site to a zone with a suitable security level. To which level would you assign the site fileserverdocuments?
a. Internet zone
b. Local intranet zone
c. Trusted sites zone
d. Restricted sites zone
Answer

6. The NTFS file format allows you to __________?
a. Encrypt data as it travels over a network.
b. Encrypt files located on a computer's hard drive.
c. Encrypt passwords for storage in a database.
d. Hide passwords with asterisks while they are entered in a text box.
e. Encrypt digital certificates used to authenticate a Web site.
Answer

7. Which of the following would you allow to attack your Web site?
a. Crackers
b. Hackers
c. Script kiddies
d. Red Teams
e. None of the above
Answer

8. You are running a Web site that uses SSL to encrypt your customers' address and credit card information when they purchase goods on your site. You have blocked all unused ports on your Web server except ports 25, 80, 1433 and 1434. Will your customers be able to pay for their orders?
a. Yes
b. No
Answer

9. Which of the following are signs that computers on your network may have been infected by spyware?
a. PCs are running unusually slow.
b. Ads are popping up.
c. Home pages have been altered.
d. There's a dramatic increase in network traffic.
e. All of the above.
Answer

10. Microsoft's cipher.exe program __________?
a. Permanently overwrites all of the deleted data on a hard drive.
b. Permanently encrypts all of the deleted data on a hard drive.
c. Empties the Recycle Bin data on a hard drive.
d. Deletes the System Page file on system shut down.
e. Empties the Recycle Bin data on system shut down.
Answer

> Learn how to harden your Web server at SearchSecurity.com's Web security school.

This was last updated in July 2008

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

SearchSecurity

  • black hat

    Black hat refers to a hacker who breaks into a computer system or network with malicious intent.

  • copyright

    Copyright is a legal term describing ownership of control of the rights to the use and distribution of certain works of creative ...

  • keylogger (keystroke logger or system monitor)

    A keylogger, sometimes called a keystroke logger or system monitor, is a type of surveillance technology used to monitor and ...

SearchHealthIT

  • population health management (PHM)

    Population health management (PHM) is a discipline within the healthcare industry that studies and facilitates care delivery ...

  • ICD-10-PCS

    The International Classification of Diseases, 10th Revision, Procedure Coding System (ICD-10-PCS) is a U.S. cataloging system for...

  • U.S. National Library of Medicine (NLM)

    The U.S. National Library of Medicine (NLM) is the largest biomedical library in the world.

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • call tree

    A call tree -- sometimes referred to as a phone tree -- is a telecommunications chain for notifying specific individuals of an ...

  • mass notification system (MNS)

    A mass notification system is a platform that sends one-way messages to inform employees and the public of an emergency.

SearchStorage

  • hybrid hard drive (HHD)

    A hybrid hard drive (HHD), sometimes known as a solid-state hybrid drive (SSHD), is a mass storage device that combines a ...

  • USB flash drive

    A USB flash drive -- also known as a stick, thumb or pen drive -- is a plug-and-play portable storage device that uses flash ...

  • open source storage

    Open source storage is data storage software developed in a public, collaborative manner that permits the free use, distribution ...

SearchSolidStateStorage

  • RRAM or ReRAM (resistive RAM)

    RRAM or ReRAM (resistive random access memory) is a form of nonvolatile storage that operates by changing the resistance of a ...

  • JEDEC

    JEDEC is a global industry group that develops open standards for microelectronics.

  • M.2 SSD

    An M.2 SSD is a solid-state drive (SSD) that conforms to a computer industry specification written for internally mounted storage...

SearchCloudStorage

  • RESTful API

    A RESTful application program interface breaks down a transaction to create a series of small modules, each of which addresses an...

  • cloud storage infrastructure

    Cloud storage infrastructure is the hardware and software framework that supports the computing requirements of a private or ...

  • Zadara VPSA and ZIOS

    Zadara Storage provides block, file or object storage with varying levels of compute and capacity through its ZIOS and VPSA ...

Close