Home › Quizzes › Securing Web Applications Services and Servers

Securing Web Applications Services and Servers

This test contains the concepts related to Web application Security and Servers for the web applications. This Test is useful questions for various IT certification exams and gate.

15 Questions Published
Play Quiz Practise this topic out loud

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is/are applicable for web application security scanner?

  1. It communicates with a web application through the web front-end.
  2. It is used to perform a black-box test for security of web applications.
  3. It provides an interface for the web applications.
  4. All of the above
  5. Both (2) and (3)
Question 2 Multiple Choice (Single Answer)

Which of the following is/are correct about Cross-site scripting (XSS) in web application security?

  1. Cross-site scripting vulnerability may be used by attackers to bypass access controls.
  2. The non-persistent XSS is used to provide data by a web client, most commonly in HTTP query parameters or in HTML form submissions.
  3. XSS makes enable attackers to inject client-side script into Web pages viewed by other users.
  4. All of the above
  5. Both (2) and (3)
Question 3 Multiple Choice (Single Answer)

Which of the following types of bugs are detected in Fuzz testing in web application security?

  1. Memory leaks
  2. Assertion failure
  3. Bugs serialization
  4. All of the above
  5. Both (1) and (2)
Question 4 Multiple Choice (Single Answer)

Which of the following is true about 'Metadata annotations' in securing the web applications?

  1. These annotations are used to specify information about security within a class file.
  2. These expresses an application’s security structure, including security roles, access control, and authentication requirements in a deployment descriptor.
  3. These security are embedded in an application.
  4. These annotations are used to specify the various threats in an application.
  5. Both (2) and (3)
Question 5 Multiple Choice (Single Answer)

Which of the following is/are not a web application security technique?

  1. Black box testing
  2. White box testing
  3. Fuzzing
  4. Web application firewalls (WAF)
  5. None of the above
Question 6 Multiple Choice (Single Answer)

Which of the following web testing tools is used to check the load testing and performance measurement both in the web applications?

  1. Selenium
  2. Apache JMeter
  3. Curl-loader
  4. Watir
  5. Both (2) and (4)
Question 7 Multiple Choice (Single Answer)

Which of the following is/are correct about Denial of Service (DoS) Attacks?

  1. This attack is an attempt to make a computer resource unavailable to its intended users.
  2. This attack is done by overloading the resource.
  3. It allows attackers to inject code into web pages viewed by other users.
  4. It does not allow attackers to inject code into web pages viewed by other users.
  5. Both (1) and (2)
Question 8 Multiple Choice (Single Answer)

Which of the following application threats come under the input validation category in web application security?

  1. Buffer overflow
  2. Cross-site scripting
  3. SQL injection
  4. All of the above
  5. Both (2) and (3)
Question 9 Multiple Choice (Single Answer)

Which of the following types of vulnerabilities are checked by web application security scanner?

  1. Input/output validation
  2. Specific application problems
  3. Server configuration problems
  4. Automatic tool support
  5. All of the above
Question 10 Multiple Choice (Single Answer)

Which of the following tests are required to test a web application performance?

  1. Windows application compatibility
  2. Operating system compatibility
  3. Browser compatibility
  4. All of the above
  5. Both (2) and (3)
Question 11 Multiple Choice (Single Answer)

Which of the following are the techniques to protect web applications from the SQL injection attack?

  1. Installing patches regularly and timely
  2. By using automated test tools
  3. By using dynamic SQL only
  4. Escape user input
  5. All of the above
Question 12 Multiple Choice (Single Answer)

Which of the following are the checklists needed for the web site security?

  1. Maintain a secure workstation.
  2. Data validation should be done on server-side.
  3. Managing web site via encrypted connections.
  4. Use redundancy to protect the web site.
  5. All of the above
Question 13 Multiple Choice (Single Answer)

What of the following are the checklists needed in file inclusion and disclosure in web application security?

  1. Do not take file names for inclusions from user input.
  2. Try to avoid having scripts read and pass through files if possible.
  3. Ensure the application runs with no more privileges than required.
  4. All of the above
  5. Both (1) and (2)
Question 14 Multiple Choice (Single Answer)

Which of the following is/are necessary to prevent vulnerabilities in file uploading on the web site?

  1. Prevent users from overwriting application files.
  2. Disable script execution in the upload directory.
  3. Ensure that the file extension matches the actual type of the file content.
  4. Prevent users from uploading problematic file types like HTML, CSS, JavaScript, etc.
  5. All of the above
Question 15 Multiple Choice (Single Answer)

Which of the following is necessary to check during data transfer in web application security?

  1. Use SSL/TLS (https) for all data transfer.
  2. Mark cookies with the “secure” attribute.
  3. Set the “HttpOnly” attribute for session cookies.
  4. All of the above
  5. Both (1) and (2)
← Back to Quizzes