Tag: security

Quizzes (70) Questions (1339)

Questions Related to security

Multiple choice technology security

Which compilation switch should be enabled for stack protection? Choose the best and most secure option.

fstack-protector
fstack-protector-all
fdelete-null-pointer-checks
Both a and b

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

unsigned char j,k; j=getchar(); k=getchar(); unsigned char result = j + k; What vulnerability is present in this code:

Heap Overflow
Integer overflow
Buffer overflow
No Vulnerability

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which statement creates a buffer over flow? (Line numbers are marked using comments /* */)

#include   
#include   
#include   
int main (int argc, char *argv[])  {   
    int i=0,j=1;   
    char ipstring[80];   
    for (;i&lt;=3;i++){    
        cout&lt;&lt;"\n entering a new character\n";    
        j=getchar();/*1*/     
        cout&lt;&lt;”enter a string”;    
        gets(ipstring);/*2*/    
        cout&lt;

1
2
Both
None

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What is the vulnerability ?

int main (int argc, char *argv[]) { 
     char k[3]; 
     int i=0,j=1; 
     char buffer[50]; 
     strncpy(buffer, argv[1], sizeof(buffer) - 1); 
     buffer[49]='/0'; 
     unsigned char ch='a'; 
     k[0]=1; 
     do{   
        i++;   
        k[i]=ch+i; 
    } while(i&lt;3); 

    return 0; 
}

Heap overflow
Integer overflow
Off by one error
None of the above

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which attack(s) are possible in the below code:

&lt;% response.sendRedirect("/with_lang.jsp?lang="+request.getParameter("language")); %&gt;

Content Spoofing
HTTP Response Splitting
Directory Listing
a & b

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Identify the name of the vulnerability exist in the below code:

1 ...   
2 public class ShowUserDetailsAction extends HttpServlet   
3 {   
4 private String currentUser;     
5 public void doPost(HttpServletRequest req, HttpServletResponse res)   
6 {   
7 try   
8 {   
9  currentUser = req.getParameter("userID");  
10  RequestDispatcher rd = getServletContext().getRequestDispatcher ("/ShowDetails.jsp");  
11  if (!"".equals(currentUser))  
12  {  
13     
14   ArrayList userInfo = new ArrayList();  
15   LoginDAO objLoginDAO = new LoginDAO();  
16   userInfo = objLoginDAO.getUserInfo(currentUser);  
17     
18   if (userInfo!=null &amp;&amp; (userInfo.size()!= 0))  
19   {  
20    req.setAttribute("UserInfo", userInfo);  
21   }  
22   else  
23   {  
24    req.setAttribute("NoUser", "true");  
25   }  
26  }  
27  rd.forward(req,res);  
28 } catch (Exception e)  
29 {  
30  log.debug(“Error Occurred:”+ e);  
31 }  
32 }  
33 }   
34 ...

URL Tampering
Brute Forcing
Race Condition
HTML Injection

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Identify the weakness in the below JSP file:

1  ...   
2     
3    
4  &lt;%   
5  if("Admin".equals(session.getAttribute("user-type")))   
6  {   
7  %&gt;   
8     
9  &lt;%  
10  }%&gt;  
11    
12   
13    
14  function doBack()  
15  {  
16   history.go(-1);  
17  }  
18  function doDelete()  
19  {  
20   document.forms[0].action="/DeleteUsersAction";  
21   document.forms[0].submit();  
22  }  
23    
24  ...

SQL Injection
Cross Site Scripting
Broken Access Control
Improper Resource Initialization

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Identify the weakness in the below JSP file:

1    
2  ...   
3  Dear User,   
4    
5  If you liked our services, then you would like to refer it to your friends.   
6    
7  Click on the below link:    
8    
9  <a href="/CWE/ReferAFriendAction?pageRedirect=">"&gt;  "Refer a Friend"!</a>  10  ...  
11

Information Disclosure
Cross Site Scripting
Usage of Risky Encryption
All of the above

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Identify the Vulnerable Line # in the below code:

1 ...   
2 public static Connection getConnection()    
3 {   
4  Connection con = null;   
5  try   
6  {   
7   Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");   
8   con = DriverManager.getConnection("jdbc:odbc:Lookup","admin","admin");   
9    
10  }catch (ClassNotFoundException e)   
11  {   
12   if(con!=null)  
13    close(con);  
14   log.debug(“Error Occurred:” + e);   
15    
16  } catch(SQLException ex)  
17  {   
18    
19   if(con!=null)  
20    close(con);  
21   log.debug(“Error Occurred:” + ex);  
22  }  
23  return con;   
24 }  
25 ...

Line # 4
Line # 13 & 20
Line # 7 & 8
None of the above

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which of the following is a security advantage of managed code over unmanaged code?

Size of the attack surface
Number of roles
Number of lines of code
Size of the chroot jail

Reveal answer Fill a bubble to check yourself

← Previous
1
2
…
114
115
116
117
118
119
120
121
122
…
133
134
Next →