Cybersecurity Unit 2.3 Review

Where do most exploits occur?

• On secure servers

• In vulnerable software

• In encrypted data

• On user devices

Know the functions of each of the following: HTML, CSS, XML

• Data structuring and presentation

• Data encryption

• Network configuration

• Hardware management

To complete the XSS exploit, where do you type in the script?

• In the server logs

• In the user input fields

• In the database

• In the network settings

How does a cross-scripting exploit change a web page?

• By altering the server code

• By modifying the database schema

• By injecting malicious scripts

• By changing the network protocol

How do each of the SQL injections work? SELECT, MERGE, UNION

• By combining data from multiple tables

• By encrypting data

• By deleting data

• By creating new tables

How could security professionals guard against SQL injections?

• Use parameterized queries

• Disable all database access

• Use plain text passwords

• Allow all user inputs

What are different ways a hacker could exploit a website using a SQL injection?

• Retrieve hidden data

• Increase website speed

• Improve user interface

• Enhance security features

What are the traits of the low, medium and high security levels on the CTS site?

• Low: No encryption, Medium: Basic encryption, High: Advanced encryption

• Low: Advanced encryption, Medium: No encryption, High: Basic encryption

• Low: Basic encryption, Medium: Advanced encryption, High: No encryption

• Low: No encryption, Medium: Advanced encryption, High: Basic encryption

What type of software is Wireshark?

• Network protocol analyzer

• Word processor

• Image editor

• Web browser

What does the ping command do? What is the syntax to do a ping command?

• Tests network connectivity; ping [destination]

• Edits text files; edit [filename]

• Compiles code; compile [source]

• Deletes files; delete [filename]