Chapter 3 Flashcards
1
Q
What language below is used to view and manipulate data that is stored in a relational database? A) C B) DQL C) SQL D) ISL
A
SQL
2
Q
Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database? A) whatever AND email IS NULL; -- B) whatever; AND email IS NULL; -- C) whatever” AND email IS NULL; -- D) whatever’ AND email IS NULL; --
A
whatever’ AND email IS NULL; –
3
Q
Which SQL injection statement example below could be used to discover the name of the table?
A) whatever%20 AND 1=(SELECT COUNT() FROM tabname); –
B) whatever’ AND 1=(SELECT COUNT() FROM tabname); –
C) whatever; AND 1=(SELECT COUNT() FROM tabname); –
D) whatever%; AND 1=(SELECT COUNT() FROM tabname); –
A
whatever’ AND 1=(SELECT COUNT(*) FROM tabname); –
4
Q
Choose the SQL injection statement example below that could be used to find specific users: A) whatever’ OR full_name = ‘%Mia%’ B) whatever’ OR full_name IS ‘%Mia%’ C) whatever’ OR full_name LIKE ‘%Mia%’ D) whatever’ OR full_name equals ‘%Mia%’
A
whatever’ OR full_name LIKE ‘%Mia%’
5
Q
Which SQL injection statement can be used to erase an entire database table? A) whatever'; DROP TABLE members;-- B) whatever'; DELETE TABLE members;-- C) whatever'; UPDATE TABLE members;-- D) whatever'; RENAME TABLE members;--
A
whatever’; DROP TABLE members;–
6
Q
HTML uses which option below within embedded brackets (< >) causing a web browser to display text in a specific format? A) blocks B) marks C) taps D) tags
A
tags
7
Q
What language below is designed to display data, with a primary focus on how the data looks? A) XML B) HTML C) SGML D) ISL
A
HTML
8
Q
What language below is for the transport and storage of data, with the focus on what data is? A) XML B) HTML C) SGML D) SML
A
XML
9
Q
To what specific directory are users generally restricted to on a web server? A) top B) base C) root D) tap
A
root
10
Q
The default root directory of the Microsoft Internet Information Services (IIS) Web server is located at which directory below? A) /var/www B) C:\Inetpub\ wwwroot C) /var/html D) C:\wwwroot
A
C:\Inetpub\ wwwroot
11
Q
Select below the string of characters that can be used to traverse up one directory level from the root directory: A) ;/ B) ./ C) %20/ D) ../
A
../
12
Q
Attacks that take place against web based services are considered to be what type of attack? A) client-side B) hybrid C) server-side D) relationship
A
server-side
13
Q
A user has become compromised as a result of visiting a specific web page, without clicking on any kind of content. What type of attack has occurred? A) buffer overflow B) drive-by-download C) denial of service D) stack underflow
A
drive-by-download
14
Q
What portion of the HTTP packet consists of fields that contain information about the characteristics of the data being transmitted? A) HTTP header B) HTML header C) XML header D) SSL header
A
HTTP header
15
Q
An attack in which the attacker attempts to impersonate the user by using his or her session token is known as: A) Session replay B) Session spoofing C) Session hijacking D) Session blocking
A
Session hijacking
