Browse Definitions:
Quiz

Quiz: Web server security

Web server security school
[SearchSecurity.com]

Web security has a language all its own. How well do you speak it?

1. Which of the following statements is true about script kiddies?
a. They target specific organizations.
b. They scan specific systems for specific weaknesses.
c. They use subtle and varied tactics.
d. They may use your system to scan or exploit other systems.
e. The number of network attacks does not increase during school holidays.
Answer

2. Your Web server should be placed in a DMZ because __________?
a. It will be safe from attack.
b. It won't be able to access the Internet otherwise.
c. It locates it on a different subnet than your intranet.
d. It is easier to wire it to the Internet.
e. It has to trust traffic coming from the Internet.
Answer

3. Phishing differs from adware and spyware because __________?
a. It is not a problem for organizations but individuals.
b. It installs malicious software on your PC.
c. It uses social engineering and technical subterfuge whereas the other two do not.
d. It is easier to stop.
e. None of the above.
Answer

4. True or False: Client-side validation of form data is the same as server-validation except that it happens on the client's machine.
Answer

5. Internet Explorer divides the Internet into zones so that you can assign a Web site to a zone with a suitable security level. To which level would you assign the site fileserverdocuments?
a. Internet zone
b. Local intranet zone
c. Trusted sites zone
d. Restricted sites zone
Answer

6. The NTFS file format allows you to __________?
a. Encrypt data as it travels over a network.
b. Encrypt files located on a computer's hard drive.
c. Encrypt passwords for storage in a database.
d. Hide passwords with asterisks while they are entered in a text box.
e. Encrypt digital certificates used to authenticate a Web site.
Answer

7. Which of the following would you allow to attack your Web site?
a. Crackers
b. Hackers
c. Script kiddies
d. Red Teams
e. None of the above
Answer

8. You are running a Web site that uses SSL to encrypt your customers' address and credit card information when they purchase goods on your site. You have blocked all unused ports on your Web server except ports 25, 80, 1433 and 1434. Will your customers be able to pay for their orders?
a. Yes
b. No
Answer

9. Which of the following are signs that computers on your network may have been infected by spyware?
a. PCs are running unusually slow.
b. Ads are popping up.
c. Home pages have been altered.
d. There's a dramatic increase in network traffic.
e. All of the above.
Answer

10. Microsoft's cipher.exe program __________?
a. Permanently overwrites all of the deleted data on a hard drive.
b. Permanently encrypts all of the deleted data on a hard drive.
c. Empties the Recycle Bin data on a hard drive.
d. Deletes the System Page file on system shut down.
e. Empties the Recycle Bin data on system shut down.
Answer

> Learn how to harden your Web server at SearchSecurity.com's Web security school.

This was last updated in July 2008

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • internal audit (IA)

    An internal audit (IA) is an organizational initiative to monitor and analyze its own business operations in order to determine ...

  • pure risk (absolute risk)

    Pure risk, also called absolute risk, is a category of threat that is beyond human control and has only one possible outcome if ...

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

SearchSecurity

  • biometrics

    Biometrics is the measurement and statistical analysis of people's unique physical and behavioral characteristics.

  • principle of least privilege (POLP)

    The principle of least privilege (POLP), an important concept in computer security, is the practice of limiting access rights for...

  • identity management (ID management)

    Identity management (ID management) is the organizational process for identifying, authenticating and authorizing individuals or ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity and disaster recovery (BCDR)

    Business continuity and disaster recovery (BCDR) are closely related practices that describe an organization's preparation for ...

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • call tree

    A call tree -- sometimes referred to as a phone tree -- is a telecommunications chain for notifying specific individuals of an ...

SearchStorage

SearchSolidStateStorage

  • hybrid hard disk drive (HDD)

    A hybrid hard disk drive is an electromechanical spinning hard disk that contains some amount of NAND Flash memory.

Close