Browse Definitions :
Quiz

Quiz: Web server security

Web server security school
[SearchSecurity.com]

Web security has a language all its own. How well do you speak it?

1. Which of the following statements is true about script kiddies?
a. They target specific organizations.
b. They scan specific systems for specific weaknesses.
c. They use subtle and varied tactics.
d. They may use your system to scan or exploit other systems.
e. The number of network attacks does not increase during school holidays.
Answer

2. Your Web server should be placed in a DMZ because __________?
a. It will be safe from attack.
b. It won't be able to access the Internet otherwise.
c. It locates it on a different subnet than your intranet.
d. It is easier to wire it to the Internet.
e. It has to trust traffic coming from the Internet.
Answer

3. Phishing differs from adware and spyware because __________?
a. It is not a problem for organizations but individuals.
b. It installs malicious software on your PC.
c. It uses social engineering and technical subterfuge whereas the other two do not.
d. It is easier to stop.
e. None of the above.
Answer

4. True or False: Client-side validation of form data is the same as server-validation except that it happens on the client's machine.
Answer

5. Internet Explorer divides the Internet into zones so that you can assign a Web site to a zone with a suitable security level. To which level would you assign the site fileserverdocuments?
a. Internet zone
b. Local intranet zone
c. Trusted sites zone
d. Restricted sites zone
Answer

6. The NTFS file format allows you to __________?
a. Encrypt data as it travels over a network.
b. Encrypt files located on a computer's hard drive.
c. Encrypt passwords for storage in a database.
d. Hide passwords with asterisks while they are entered in a text box.
e. Encrypt digital certificates used to authenticate a Web site.
Answer

7. Which of the following would you allow to attack your Web site?
a. Crackers
b. Hackers
c. Script kiddies
d. Red Teams
e. None of the above
Answer

8. You are running a Web site that uses SSL to encrypt your customers' address and credit card information when they purchase goods on your site. You have blocked all unused ports on your Web server except ports 25, 80, 1433 and 1434. Will your customers be able to pay for their orders?
a. Yes
b. No
Answer

9. Which of the following are signs that computers on your network may have been infected by spyware?
a. PCs are running unusually slow.
b. Ads are popping up.
c. Home pages have been altered.
d. There's a dramatic increase in network traffic.
e. All of the above.
Answer

10. Microsoft's cipher.exe program __________?
a. Permanently overwrites all of the deleted data on a hard drive.
b. Permanently encrypts all of the deleted data on a hard drive.
c. Empties the Recycle Bin data on a hard drive.
d. Deletes the System Page file on system shut down.
e. Empties the Recycle Bin data on system shut down.
Answer

> Learn how to harden your Web server at SearchSecurity.com's Web security school.

This was last updated in July 2008

SearchCompliance

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

SearchSecurity

  • cyber espionage

    Cyber espionage, also called cyber spying, is a form of cyber attack that is carried out against a competitive company or ...

  • virus (computer virus)

    A computer virus is malicious code that replicates by copying itself to another program, computer boot sector or document and ...

  • honeypot (computing)

    A honeypot is a network-attached system set up as a decoy to lure cyber attackers and detect, deflect and study hacking attempts ...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud storage

    Cloud storage is a service model in which data is transmitted and stored on remote storage systems, where it is maintained, ...

  • cloud testing

    Cloud testing is the process of using the cloud computing resources of a third-party service provider to test software ...

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

Close