Web Security and Cyber Attacks

The scenario describes an email that pretends to be from a bank and asks the recipient to click a link to verify a prize, aiming to steal login credentials; this is classic phishing.

A Trojan Horse is malicious software disguised as legitimate software. The 'freeware' appeared useful but caused unauthorized data usage (internet bills) and erratic application behavior (malicious activity). Viruses replicate themselves, malware is a broad category, and keyloggers capture keystrokes specifically.

Internet Explorer's MIME sniffing feature can treat images as HTML if they contain HTML-like content. An attacker could upload an image file with embedded script content; when IE processes it as HTML due to MIME sniffing, the script executes (Cross-site Scripting by MIME sniffing). Regular XSS requires a script tag, log injection targets logs, and identity theft involves stealing personal information.

Browser cache poisoning involves injecting malicious content into the browser's cache. When the victim revisits the site, the browser loads the poisoned cached content instead of fresh content from the server. Clearing browser cache removes the poisoned content, restoring normal display. Reflected XSS doesn't persist across sessions, persistent XSS requires server-side storage, and link injection doesn't affect cache.

Identity Theft involves using someone's personal information without their permission, typically on websites they never registered with. Information stealth is not a standard security term, Sensitive Information Disclosure refers to exposing data by a system, and XSS by MIME sniffing is a specific browser vulnerability.

Configuration Management weakness means backup files weren't properly protected or removed from the web server. This allows users to access sensitive backup files directly. Sensitive Information Disclosure is the consequence, not the vulnerability itself. Input validation filters user input, and vulnerable cookie refers to cookie security issues.

Cross-site Request Forgery (CSRF) tricks a user into executing unwanted actions on a website where they're authenticated. User B, already logged in, clicks the manipulated link and unknowingly places a bid using their session. Identity theft involves stealing personal information, XML Injection targets XML parsers, and reflected XSS requires script execution in the response.

Pharming is an attack that redirects users to fake websites by compromising DNS settings or poisoning DNS caches, unlike phishing which requires clicking a link. Option C is correct. Session hijacking (A) steals user sessions, phishing (B) uses deceptive links, and MAC spoofing (D) forges hardware addresses.

Virtual keyboards protect against keyloggers by allowing users to click on-screen keys instead of typing, making it impossible for hardware or software keyloggers to capture keystrokes. Option D is correct. Phishing (A) and pharming (B) involve fake websites, while session hijacking (C) steals user sessions; virtual keyboards don't directly defend against these.

Social engineering attacks exploit human psychology and trust, making them extremely difficult to defend against completely with technical solutions. Option C is correct. While phishing (A), trojans (B), and session hijacking (D) have technical defenses (antivirus, secure protocols, etc.), social engineering relies on manipulating people: there's no patch for human vulnerability.

A Trojan horse is malware disguised as legitimate or useful software, tricking users into installing it. Option B is correct. A worm (A) self-replicates across networks, script injection (C) injects malicious code into applications, and DOS attack (D) overwhelms systems with traffic; none of these describe malware hidden inside useful software.

While all options are important security practices, making frequent backups and storing them in remote locations is the most critical procedure for protecting data. Backups ensure data can be recovered after any type of failure, corruption, or security breach, making it the foundation of data protection strategy.

Options A, B, and D are classic SQL injection payloads that manipulate WHERE clauses to always evaluate true. Option C (' or 1=1 or 'user' = ') is NOT standard SQL injection syntax - the ending structure is malformed and wouldn't successfully bypass authentication.

To solve this question, the user needs to have knowledge of network security. The user must also understand the purpose of each option and how it relates to the problem of collecting information on attackers.

A. DMZ(Demilitarized zone): A DMZ is a network segment that is separated from the internal network by a firewall. It is used to host servers that need to be accessed by external users while keeping the internal network secure. While a DMZ can provide some protection for the internal network, it is not designed to collect information on attackers.

B. Firewall: Firewalls are devices that are used to control access to a network. They can be used to block incoming traffic from known attackers or to limit outgoing traffic to prevent sensitive information from leaving the network. While firewalls can provide some protection against attacks, they are not designed to collect information on attackers.

C. New subnet: A subnet is a logical division of a network. Creating a new subnet can help to isolate traffic and limit the scope of an attack. However, a new subnet does not provide any mechanism for collecting information on attackers.

D. Honeypot: A honeypot is a decoy system that is designed to attract attackers. It can be used to collect information on attackers and to study their behavior. A honeypot can be set up to look like a legitimate system or service, but it is actually designed to log all activity. This information can be used to track down and prosecute attackers.

Therefore, the correct answer is:

The Answer is: D (Honeypot)

This is a SQL injection vulnerability. The query concatenates empid directly into SQL: empid="+empid. If empid is "101 union all select pname,1,1 from proj;" (Option B), the injection succeeds because UNION ALL requires matching column count (3 columns) and compatible types (string, number, number). Option D also works: "101 union all select pid,pname,pcost from proj;" matches the 3-column structure. Options A and C fail: A selects * (unknown columns), C selects only 1 column (mismatch).

SQL injection attacks use operators like single quote (') to break out of string contexts, bitwise OR (|) and AND (&) for logic manipulation, asterisk (*) as a wildcard, and comparison operators (<, >, =) to alter query conditions. Option C includes the most comprehensive set of these critical operators.

DOS (Denial of Service) is the attack type where attackers block or deny access to accounts and services like Ultimatix by overwhelming systems with traffic. A worm is self-replicating malware, Trojan Horse disguises malicious code, and Shell is a command interface - none primarily aim to block access like DOS does.

AppScan is a black box testing tool because it tests the application from the outside without accessing the internal code structure. White box requires code access, gray box combines both approaches, and 'yellow box' is not a standard testing category.