Browse Definitions :
Quiz

Quiz: Web server security

Web server security school
[SearchSecurity.com]

Web security has a language all its own. How well do you speak it?

1. Which of the following statements is true about script kiddies?
a. They target specific organizations.
b. They scan specific systems for specific weaknesses.
c. They use subtle and varied tactics.
d. They may use your system to scan or exploit other systems.
e. The number of network attacks does not increase during school holidays.
Answer

2. Your Web server should be placed in a DMZ because __________?
a. It will be safe from attack.
b. It won't be able to access the Internet otherwise.
c. It locates it on a different subnet than your intranet.
d. It is easier to wire it to the Internet.
e. It has to trust traffic coming from the Internet.
Answer

3. Phishing differs from adware and spyware because __________?
a. It is not a problem for organizations but individuals.
b. It installs malicious software on your PC.
c. It uses social engineering and technical subterfuge whereas the other two do not.
d. It is easier to stop.
e. None of the above.
Answer

4. True or False: Client-side validation of form data is the same as server-validation except that it happens on the client's machine.
Answer

5. Internet Explorer divides the Internet into zones so that you can assign a Web site to a zone with a suitable security level. To which level would you assign the site fileserverdocuments?
a. Internet zone
b. Local intranet zone
c. Trusted sites zone
d. Restricted sites zone
Answer

6. The NTFS file format allows you to __________?
a. Encrypt data as it travels over a network.
b. Encrypt files located on a computer's hard drive.
c. Encrypt passwords for storage in a database.
d. Hide passwords with asterisks while they are entered in a text box.
e. Encrypt digital certificates used to authenticate a Web site.
Answer

7. Which of the following would you allow to attack your Web site?
a. Crackers
b. Hackers
c. Script kiddies
d. Red Teams
e. None of the above
Answer

8. You are running a Web site that uses SSL to encrypt your customers' address and credit card information when they purchase goods on your site. You have blocked all unused ports on your Web server except ports 25, 80, 1433 and 1434. Will your customers be able to pay for their orders?
a. Yes
b. No
Answer

9. Which of the following are signs that computers on your network may have been infected by spyware?
a. PCs are running unusually slow.
b. Ads are popping up.
c. Home pages have been altered.
d. There's a dramatic increase in network traffic.
e. All of the above.
Answer

10. Microsoft's cipher.exe program __________?
a. Permanently overwrites all of the deleted data on a hard drive.
b. Permanently encrypts all of the deleted data on a hard drive.
c. Empties the Recycle Bin data on a hard drive.
d. Deletes the System Page file on system shut down.
e. Empties the Recycle Bin data on system shut down.
Answer

> Learn how to harden your Web server at SearchSecurity.com's Web security school.

This was last updated in July 2008
SearchCompliance
  • OPSEC (operations security)

    OPSEC (operations security) is a security and risk management process and strategy that classifies information, then determines ...

  • smart contract

    A smart contract is a decentralized application that executes business logic in response to events.

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

SearchSecurity
  • email virus

    An email virus consists of malicious code distributed in email messages to infect one or more devices.

  • key fob

    A key fob is a small, programmable device that provides access to a physical object.

  • identity theft

    Identity theft, also known as identity fraud, is a crime in which an imposter obtains key pieces of personally identifiable ...

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • change control

    Change control is a systematic approach to managing all changes made to a product or system.

  • disaster recovery (DR)

    Disaster recovery (DR) is an organization's ability to respond to and recover from an event that affects business operations.

SearchStorage
  • JBOD (just a bunch of disks)

    JBOD, which stands for 'just a bunch of disks,' is a type of multilevel configuration for disks.

  • bare-metal restore

    A bare-metal restore (also referred to as bare-metal recovery or bare-metal backup) is a data recovery and restoration process ...

  • mSATA SSD (mSATA solid-state drive)

    An mSATA SSD is a solid-state drive (SSD) that conforms to the mSATA interface specification developed by the Serial ATA (SATA) ...

Close