Hidden tags

Query Strings

Header

Cookies

Hashing the password twice

Encrypting the password using the private key

Use an encryption algorithm you wrote your self so no one knows how it works

Salting the hash

Can be done as it as an internal IP

Can be done for internet facing servers as there are no chances of IP conflicts

Is a good security practice

Is a bad security practice

Should be placed securely in a folder called “temp” in the web root

Can be placed anywhere in the web root as long as there are no links to them

Should be completely removed from the server

Can be placed anywhere after changing the extension

Print the logs to a paper

Create a copy of data in your laptop/desktop

Copy the files to CD-R's

None of the above

Unvalidated input

Lack of authentication

Improper error handing

Insecure configuration management

Data Validation

Secure Cookies

Encryption

Comprehensive exception handling

Request that the user authenticate him/herself by replying to the email with their account credentials.

Personalized greeting line

Providing easy access to the customer's account via a “Click Here” style link

Sending the email from a domain set up specifically for the special offer

Client (Browser)

Database

Web Application

Web Server

Secure

Domain

Expires

Static

Compromise of users

Loss of data integrity

Destruction of data

None of the above

Host Header

Cookie

Referrer Header

None of the above

Java

ASP.Net

Perl

All of the above

Data is validated against a list of values that are known to be valid

Data is validated against a list of values that are known to be invalid

Both of the above

None of the above

Arbitrary code execution

Inadequate caching headers

Distributed Denial of Service Attack against clients

None of the above

Cross-Site Scripting

Buffer over flows

Command injection

Path traversal attack

Session ID

Account Privileges

UserName

Password

The type of users who would be accessing the data

Availability, Integrity and Confidentiality

The threat level the company faces

Access controls protecting the data

Availability, Integrity, Confidentiality

Usability, Reliability, Accountability

Quality, Accountability, Integrity

None of the above