Security | Practice Questions | Aliensbrain

Multiple choice technology security

int i=987987987;
int j= i*10;

what is the value of j (size of integer is 4 bytes)?

1289945278
garbage. Integer j cannot hold such large values
9879879870
Program is aborted.

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

The application is receiving input from an external source. Which of the following external sources can be considered safe?

Shell environment variables
Data received via encrypted network channels
argv[0] can only have either null or program name
no external input must be trusted

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In the following code snippet, should the pointer be deleted?

int main (int argc, char *argv[]) { 
    char* j;  
    j=argv[1];  
    int k=atoi(j);  
    /*delete here*/  
    return 0; 
}

delete j;
realloc j;
free j;
It need not be deleted

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

How many of following are security code review tools

OWASP WebScarab
Fortify
WebInspect
AppScan
Nikto
FindBugs

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

int main(char* argc, char** argv) { 
    char cmd[CMD_MAX] = "/usr/bin/cat "; 
    strcat(cmd, argv[1]); 
    system(cmd); 
}

Code is vulnerable to buffer overflow attack and

DNS Spoofing
Command Injection
Path Traversal
Both 2 and 3

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What can go wrong in following code?

#include  
int main(int argc, char *argv[]){
    if(argc != 3){
        printf("usage: %s [source] [dest]n", argv[0]);
        exit(1);
    }
    char buffer1[5];
    strcpy(buffer1, argv[1]);
    char buffer2[5];
    strcpy(buffer1, argv[1]);
    char x;
    FILE *file[2];
    file[0] = fopen(buffer1,"r+");
    file[1] = fopen(buffer2,"w+");
    for(x = 0; x &lt; 2; x++){
        if(file[x] == NULL){
            printf("error opening file.n");
            exit(1);
        }
    }
    do {
        x = fgetc(file[0]);
        fputc(x,file[1]);
    }
    while(x != EOF);
    for(x = 0; x &lt; 2; x++)         
        fclose(file[x]);
    return 0;
}

XSS
Arc Injection
Buffer Overflow
both 2 and 3

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In the following code snippet, how should a pointer be deleted

int main (int argc, char *argv[]) { 
    char* j=new char[100];  
    j=argv[1];  
    int k=atoi(j);  
    /*delete here*/  
    return 0; 
}

delete j
free j
it is not supposed to be deleted
delete [] j

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

A program wants to do some activities with root privileges when it starts up and shuts down. Other activities it does can be done as a lesser privileged user. Which of the options given below is most secure?

The program should be started with root privileges. Then it should use setuid(UID) to change privileges between root and another account.
The program should be started with root privileges. Then it should use seteuid(UID) to change privileges between root and another account.
Starting the program as root is a security risk. The program should run with least privileges and obtain root using seteuid(UID) whenever necessary.
The program has to run with root privileges entirely. Once root privileges are dropped they cannot be regained.

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What value is stored in *leaf in the program given below?

int *myfunc(int tree) {   
    int *node;   
    int i=rand();   
    if(0==tree/pow(2,i))       
        node=&amp;tree;   
    else       
        node=&amp;i;   
    return node; 
}  

int main(int argc, char * argv[]) {   
    int *leaf;   
    leaf=myfunc(7); 
}

value of tree
value of node
value of i
garbage-- its a dangling pointer

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

List the correct entries in the web.xml deployment descriptor for Exception & Error Handling

<error-page> <exception-type>java.lang.Throwable</exception-type> <location>/error.jsp</location> </error-page>
<error-page> <error-code>500</error-code> <location>/error.jsp</location> </error-page>
<error-page> <location>/error.jsp</location> </error-page>
a & b

Reveal answer Fill a bubble to check yourself

Tag: security

Questions Related to security