Tag: security

Quizzes (70) Questions (1339)

Questions Related to security

Multiple choice technology security

While using "Forgot Password" feature by user to recover the password, what should be checked first

whether the credentials provided are valid and correct
whether account is already disabled
whether account is locked
whether the CAPTCHA values entered by the user same as what is in the image

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which tool can be used for Threat Modeling

HP Web Inspect
Nessus
Open Vas
TAM

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Name the attack: A software that uses a security hole to carry out an attack before the developer knows about the vulnerability.

Zero day
Unknown
stealth
Trojan

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Name the attack: Hacker sends an e-mail that claims you have won a prize and all you have to do is click this link to claim your prize.

session hijacking
XSS
HTTP Response splitting
HTML Injection

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Which of the following is mandatory for the audit and access logs of the application to be valid in the court of law

log should have url accessed by user
Date and time logged in the logs should be in IST format
logs have to be in W3C format
System time is in sync with INDIA domain time and the logs should have uniquely identifiable information about the user

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

When you are performing EQA of an application developed by another project, you are doing

white box testing
black box testing
security testing
vulnerability testing

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

An application is developed and deployed in production. A bug was found and a CR was raised and modified code is ready for deployment after following SSA and SDLC. This interim release of the application is called

Release of CR
maintenance of application
release of patch
interim release of CR

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

The application logs are backed up in a media and retained for years as required by law. One of the media found defective after a long period of time. What do we need to do with the media

Use it for overwriting current logs
Inform stakeholders and degauss the media
Keep it safely and securely in the fire proof safe
format the media

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

You are asked to develop an application from scratch. When will you start performing Threat Modeling of the application

At the design stage
At the beginning of testing phase
During requirements collection phase
HP Webinspect performs the Threat Modeling, I do not need to do anything

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

When you developing an application both secured and not secured web pages, what is the reason for the need to have the login page SSL enabled

MITM proxy can be used to change the URL to a non secured one
If the login page is not SSL enabled, the credentials will be transmitted in plain text to the web server and Attacker can sniff the credentials supplied by the user
Firewall logs will have the credentials in plain text
proxy logs will have the credentials in plain text

Reveal answer Fill a bubble to check yourself

← Previous
1
2
…
126
127
128
129
130
131
132
133
134
Next →