OWASP Top 10 Web Application Security Risks (2021)

What is 'Broken Access Control' in web application security?

• A vulnerability that allows unauthorized users to access restricted areas

• A method to enhance user interface design

• A technique for improving database performance

• A strategy for optimizing network bandwidth

What are 'Cryptographic Failures' and how can they be mitigated?

• They are failures in cryptographic algorithms and can be mitigated by using strong encryption standards.

• They are network failures and can be mitigated by improving bandwidth.

• They are hardware failures and can be mitigated by upgrading devices.

• They are software bugs and can be mitigated by regular updates.

Which of the following best describes 'Injection' as a web application security risk?

• A technique used to improve website performance

• A method to inject malicious code into a web application

• A strategy for enhancing user interface design

• A process for optimizing database queries

What is the purpose of the Dashboard tab in Burp Suite?

• To manage user accounts

• To display an overview of the current security testing status

• To configure network settings

• To write custom scripts

Which of the following is a mitigation strategy for IDOR?

• Implement proper access controls

• Use direct references

• Ignore authorization checks

• Allow unauthorized access

What is a key mitigation strategy for BFLA/BOLA?

• Implementing strong authentication mechanisms

• Increasing network bandwidth

• Using outdated software

• Ignoring security updates

Which of the following is a common issue associated with cryptographic failures as mentioned in the OWASP Top 10 - 2021?

• Insecure storage of cryptographic keys

• Use of strong and updated cryptographic algorithms

• Regular security audits

• Implementing multi-factor authentication

What is the description of injection flaws according to OWASP Top 10 - 2021?

• Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query.

• Injection flaws are related to improper session management.

• Injection flaws are vulnerabilities that allow unauthorized access to data.

• Injection flaws are issues with data encryption methods.

Command Injection is:

• A type of cyber attack where the attacker executes arbitrary commands on a host operating system.

• A method to improve command line efficiency.

• A technique to inject commands into a database.

• A way to enhance system performance by injecting commands.

What is NoSQL Injection?

• A type of database

• A method to secure NoSQL databases

• A security vulnerability in NoSQL databases

• A programming language