Browse Definitions:

Quiz: Web server security

Web server security school

Web security has a language all its own. How well do you speak it?

1. Which of the following statements is true about script kiddies?
a. They target specific organizations.
b. They scan specific systems for specific weaknesses.
c. They use subtle and varied tactics.
d. They may use your system to scan or exploit other systems.
e. The number of network attacks does not increase during school holidays.

2. Your Web server should be placed in a DMZ because __________?
a. It will be safe from attack.
b. It won't be able to access the Internet otherwise.
c. It locates it on a different subnet than your intranet.
d. It is easier to wire it to the Internet.
e. It has to trust traffic coming from the Internet.

3. Phishing differs from adware and spyware because __________?
a. It is not a problem for organizations but individuals.
b. It installs malicious software on your PC.
c. It uses social engineering and technical subterfuge whereas the other two do not.
d. It is easier to stop.
e. None of the above.

4. True or False: Client-side validation of form data is the same as server-validation except that it happens on the client's machine.

5. Internet Explorer divides the Internet into zones so that you can assign a Web site to a zone with a suitable security level. To which level would you assign the site fileserverdocuments?
a. Internet zone
b. Local intranet zone
c. Trusted sites zone
d. Restricted sites zone

6. The NTFS file format allows you to __________?
a. Encrypt data as it travels over a network.
b. Encrypt files located on a computer's hard drive.
c. Encrypt passwords for storage in a database.
d. Hide passwords with asterisks while they are entered in a text box.
e. Encrypt digital certificates used to authenticate a Web site.

7. Which of the following would you allow to attack your Web site?
a. Crackers
b. Hackers
c. Script kiddies
d. Red Teams
e. None of the above

8. You are running a Web site that uses SSL to encrypt your customers' address and credit card information when they purchase goods on your site. You have blocked all unused ports on your Web server except ports 25, 80, 1433 and 1434. Will your customers be able to pay for their orders?
a. Yes
b. No

9. Which of the following are signs that computers on your network may have been infected by spyware?
a. PCs are running unusually slow.
b. Ads are popping up.
c. Home pages have been altered.
d. There's a dramatic increase in network traffic.
e. All of the above.

10. Microsoft's cipher.exe program __________?
a. Permanently overwrites all of the deleted data on a hard drive.
b. Permanently encrypts all of the deleted data on a hard drive.
c. Empties the Recycle Bin data on a hard drive.
d. Deletes the System Page file on system shut down.
e. Empties the Recycle Bin data on system shut down.

> Learn how to harden your Web server at's Web security school.

This was last updated in July 2008

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.


File Extensions and File Formats


  • risk map (risk heat map)

    A risk map, also known as a risk heat map, is a data visualization tool for communicating specific risks an organization faces. A...

  • internal audit (IA)

    An internal audit (IA) is an organizational initiative to monitor and analyze its own business operations in order to determine ...

  • pure risk (absolute risk)

    Pure risk, also called absolute risk, is a category of threat that is beyond human control and has only one possible outcome if ...


  • federated identity management (FIM)

    Federated identity management (FIM) is an arrangement that can be made among multiple enterprises to let subscribers use the same...

  • cross-site scripting (XSS)

    Cross-site scripting (XSS) is a type of injection security attack in which an attacker injects data, such as a malicious script, ...

  • firewall

    In computing, a firewall is software or firmware that enforces a set of rules about what data packets will be allowed to enter or...




  • bad block

    A bad block is an area of storage media that is no longer reliable for storing and retrieving data because it has been physically...

  • all-flash array (AFA)

    An all-flash array (AFA), also known as a solid-state storage disk system, is an external storage array that uses only flash ...

  • volume manager

    A volume manager is software within an operating system (OS) that controls capacity allocation for storage arrays.


  • hybrid hard disk drive (HDD)

    A hybrid hard disk drive is an electromechanical spinning hard disk that contains some amount of NAND Flash memory.