Tag: security

Quizzes (70) Questions (1339)

Questions Related to security

Multiple choice technology security

Neil is a budding software developer who has requested you to review his code.He has been asked by the client manager to create an administrative web application designed allow users to kick off a backup of an Oracle database using a batch-file wrapper around the rman utility . The script rmanDB.bat accepts a single command line parameter, which specifies what type of backup to perform. Because access to the database is restricted, the application runs the backup as a privileged user. The commmand to execute the rman script is cmd.exe /K \c:\util\rmanDB.bat < User Specified Back Up type> .Neil has coded the program and which simply accepts the user specified back up variable as a string and directly excutes the command line. What is the most likely vulnerability this code is exposed to?

  1. Command Injection

  2. Buffer Overflow

  3. Persistent XSS

  4. CSRF
Reveal answer Fill a bubble to check yourself
A Correct answer
Full explanation
Multiple choice technology security

If a database is protected from modification using only symmetric encryption, someone may still be able to mount an attack by:

  1. Moving blocks of data such that a field belonging to one person is assigned to another

  2. Changing the encryption key so that a collision occurs

  3. Using the public key instead of the private key

  4. Arranging to intercept the public key in transit and replae it with his own
Reveal answer Fill a bubble to check yourself
A Correct answer
Full explanation