1.2 Describe Security Vulnerabilities and Exploits Such as Software Bugs, Weak And/or Hardcoded Passwords, OWASP Top Ten, Missing Encryption Ciphers, Buffer Overflow, Path Traversal, Cross-Site Scripting/forgery, SQL Injection, and Identification and Prioritization Using CVEs and CVSS Scores 350-701 Practice Questions (Page 8)

Questions 36–39

1. 36application · medium

   A web application has a login form that constructs a SQL query by concatenating user input directly. An attacker enters ' OR '1'='1' -- as the username. Which vulnerability is being exploited, and what is the best defense?

   • ACSRF; use anti-CSRF tokens.
   • BBuffer overflow; use safe functions.
   • CXSS; encode output.
   • DSQL injection; use parameterized queries or prepared statements.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which OWASP Top Ten risk involves an attacker sending malicious data to an application that is then used unsafely in a SQL query?

   • ACross-Site Scripting
   • BInjection
   • CBroken Access Control
   • DSecurity Misconfiguration
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which defense is most effective in preventing CSRF attacks?

   • ADisabling cookies in the browser.
   • BUsing HTTPS to encrypt all traffic.
   • CImplementing input validation on the server.
   • DUsing anti-CSRF tokens that are validated on the server.
   Reveal Solution Discussion Select an answer first
5. 39expert · medium

   A security analyst is investigating a series of attacks on a web application. The attacks involve injecting scripts that execute in the victim's browser, but the scripts are not stored on the server. Instead, the attacker sends a crafted link that includes the script in the URL. The application reflects the URL parameter without encoding. Which type of XSS is this, and what is the most effective defense?

   • AReflected XSS; implement output encoding and validate input.
   • BDOM-based XSS; use a web application firewall.
   • CSQL injection; use parameterized queries.
   • DStored XSS; use input validation.
   Reveal Solution Discussion Select an answer first