Which encyption algorith is strongest and is being used by US Govt.
DES
Triple DES
whirpool
AES
Name Microsoft's experimental project that works just opposite of honeypot project?
HoneyMonkeys
Honeybees
HoneyHoney
HoneyFix
What is sandbox in computer world ?
Antivirus
A restricted environment in which certain functions are prohibited
Worm
Backdoor
Clickjacking can be used to Trick users to enable their webcam and microphone through Flash
don't know
no
yes
may be
What is Cross Site Printing?
A typo for Cross Site Scripting
A new Printing technology from Microsoft
A new attack that prints to your internal printers when you visit a website
None of these
Your Internet Banking site is fully SSL enabled. Login-page, Account summary page and Fund transfer page are all HTTPS enabled. When you bank online - login, check your account summary and do a fund transfer, is SSL authentication and handshake happening separately for each page or is it one handshake for all the three pages?
HTTP is stateless, so is SSL. Full SSL handshake needed for each HTTP page.
SSL is stateful, only one full handshake for multiple HTTP pages in a session.
SSL is security at IP layer. One handshake for one set of source/destination IP address.
dont know
Which among the below is an example of information leakage vulnerability
Displaying “Welcome, “+request.getParameter(“userid”)
Displaying “You entered either a wrong user id or password” error message
Call stack trace
Return error code 404
During testing you observed that after few minutes of initiating the scan appscan locks itself out of the application. How will you resolve the problem
Configure appscan not to test login/logout pages
Increase the thread count
Decrease the timeout
Increase the timeout
While analyzing your application you observed that a part of your application is accessed using the domain name whereas the login url is defined as http://10.1.52.3/apps/login.asp. How will you configure appscan to test this Application?
Add the domain name in the “Additional servers and domains” section in the scan configuration
Add 10.1.52.3 in the “Additional servers and domains” section in the scan configuration
Put the domain name in the login url
Change the application code to reflect the domain name every where
Which among the below do you think is the right approach for secure session management?
Display “Welcome, user!” on the home page
Display only “Welcome” on the home page
Invalidate and destroy the session when user logs out
Use persistent cookies for session management