Q13

Question 1

The order for authentication are…?
A. login, access control mechanism, resources
B. access control mechanism, login, resources
C. resources, login, access control mechanism
D. none of the above

Answer 1

A. login, access control mechanism, resources

Question 2

Three-factor authentication includes...?
 A. Fingerprint & card &PIN
 B. Fingerprint & PIN & password
 C. both a and b
 D. none of the above

Answer 2

A. Fingerprint & card &PIN

Question 3

Which of these is one of the three types of security attacks?
 A. Confidentiality
 B. Integrity
 C. Availability
 D. all of the above

Answer 3

D. all of the above

Question 4

Which of these is NOT true about cross site scripts?
A. it may bypass access controls such as the same-origin policy
B. rather than entering SQL code, hackers enter code to run Java in an input field
C. it enables attackers to inject client-side scripts into web pages
D. XSS was for roughly 84% of all security vulnerabilities documented by Symantec up until 2007

Answer 4

B. rather than entering SQL code, hackers enter code to run Java in an input field

Question 5

Two-factor authentication includes?
 A. ATM card + PIN
 B. Password + PIN
 C. both a and b
 D. none of the above

Answer 5

A. ATM card + PIN

Question 6

You can authenticate by...?
 A. What you know
 B. What you have
 C. What you do
 D. All of the above

Answer 6

D. All of the above

Question 7

Which of these is correct about security?
A. it is advised that you allow database connection script to be directly accessible
B. most vulnerabilities come from code defects or things overlooked
C. special html and escape characters increase security strength
D. not many current hacks are due to known old vulnerabilities

Answer 7

B. most vulnerabilities come from code defects or things overlooked

Question 8

When it comes to authentication factors, something you know is a password or pin
A. True
B. False

Answer 8

A. True

Question 9

Having different passwords to encrypt and decrypt is called:
 A. Multi-factor encryption
 B. Asymmetric encryption
 C. Hashing
 D. none of the above

Answer 9

B. Asymmetric encryption

Question 10

‘Hashing’ is another way of saying ‘encrypting’
A. True
B. False

Answer 10

B. False

Question 11

When it comes to authentication factors, something you are is a personal trait
A. True
B. False

Answer 11

A. True

Question 12

One way to avoid SQL injections is to remove quotes from the variables used in the query string
A. True
B. False

Answer 12

A. True

Question 13

Programs in Java and JavaScript are vulnerable buffer overflow attacks
A. True
B. False

Answer 13

B. False

Question 14

When it comes to authentication factors, something you have is a key or token
A. True
B. False

Answer 14

A. True

Question 15

Each User ID is associated with a secret
A. True
B. False

Answer 15

A. True

Question 16

DoS stands for denial of security
A. True
B. False

Answer 16

B. False