Cybersecurity Final Review FALL24

What is SQL Injection?

• A method for improving database performance

• A vulnerability where users inject malicious code into SQL statements

• A process for automatically updating database tables

• A technique for encrypting database queries

How does a Next-Generation Firewall (NGFW) enhance security compared to first-generation firewalls?

• By using stateless rules

• By focusing solely on individual packets

• By performing deep-packet inspection and application-level analysis

• By blocking all outgoing traffic by default

Which of the following is a key feature of prepared statements in SQL?

• They merge code and data for faster processing

• They parse and execute SQL statements without optimization

• They separate data and code to prevent injection attacks

• They allow unrestricted user input for dynamic queries

What is the vulnerability in the following code?

• e.preventDefault()

• innerHTML

• document.getElementById()

• None of the above

What is the key difference between HTTP and HTTPS?

• • HTTPS is encrypted and secured using digital certificates, while HTTP is not

• • HTTP is encrypted and secured using digital certificates, while HTTPS is not

• There is no difference between the two

• HTTPS sends POST requests only while HTTP only sends GET requests

Which of the following are stateful mechanisms? (Answer may be more than one)

• cookies

• session

• localStorage

• donuts

What is the primary purpose of Nmap?

• To encrypt network traffic

• To monitor email communications

• To replace firewalls in network security

• To scan and analyze networks for hosts and services

What is one of the fundamental causes of several types of vulnerabilities and attacks?

• Validating input from users

• Separating code and data

• Mixing code and data together

• Using localStorage instead of sessions

Which of the following is an effective countermeasure against SQL Injection?

• Using SELECT * in queries

• Allowing direct user input in SQL statements

• Disabling database logs

• Filtering and encoding user input

What type of attack is the following code vulnerable to?

• SQL Injection Attack

• Buffer Overflow Attack

• Cross-Site Scripting Attack

• Cross-Site Request Forgery