Cloud and Web Security Quiz

What does NIST define cloud computing as?

• A model for enabling ubiquitous access to computing resources

• A programming language for cloud services

• A method for securing web applications

• A type of data storage solution

Which of the following is NOT one of the essential characteristics of cloud computing?

• On-demand self-service

• Broad network access

• Resource pooling

• Static resource allocation

What is a common risk associated with insecure interfaces and APIs?

• Malicious insiders

• Phishing attacks

• Increased complexity and risks

• Data loss

Which of the following is a countermeasure for account or service hijacking?

• Use weak passwords

• Allow multiple logins from different devices

• Prohibit sharing of account credentials

• Disable two-factor authentication

What is the primary purpose of OpenStack?

• To provide a secure web browser

• To enhance data encryption

• To develop mobile applications

• To create and manage virtual private servers

Which of the following is a requirement for IoT security according to ITU-T Recommendation Y.2066?

• Network speed enhancement

• Cloud storage optimization

• User interface design

• Data management security

What is a common vulnerability found in web applications related to user input?

• Cross-site scripting (XSS)

• Data encryption

• Firewall configuration

• Network segmentation

What type of SQL injection allows an attacker to gain access to all rows in a database?

• Based on parameterized queries

• Based on stored procedures

• Based on user input validation

• Based on 1=1

Which of the following is a method to protect against SQL injection attacks?

• Using SQL parameters

• Allowing direct user input

• Disabling database access

• Using plain text passwords

What is a phishing attack?

• A network security protocol

• A type of malware

• A technique to secure web applications

• A method to trick users into revealing personal information