Question 1
What was the main consequence of the Pentium FDIV bug?
Correct answer: Damage to reputation
Question 2
You are the network administrator of a company that utilizes a firewall to protect its internal network from unauthorized access. Recently, some employees have been complaining about difficulties accessing certain legitimate websites and online services. After investigating, you discover that the firewall is blocking those websites. What should you do?
Correct answer: Whitelist the blocked websites and services in the firewall's configuration.
Question 3
You receive a phishing email with a suspicious link. What should you do to ensure web application security?
Correct answer: Delete the email and avoid clicking any suspicious links.
Question 4
You are a developer working on a web application. A user reports that they were able to access restricted content on the application without proper authorization. What should be the immediate action?
Correct answer: Investigate the issue to verify the user's claim.
Question 5
What does SMLI stand for in SMLI firewalls?
Correct answer: Stateful Multilayer Inspection
Question 6
A software error in an e-commerce platform resulted in the loss of customer data, including credit card information. Which factor contributes to the financial toll of this software error? What factor contributes to the financial toll of this software error?
Correct answer: Lost sales opportunities
Question 7
What aspect of web application security involves protecting against user impersonation and ensuring credential strength?
Correct answer: Authentication and session management
Question 8
What is the impact of a successful SQL injection attack?
Correct answer: All of the above.
Question 9
What is the purpose of a firewall?
Correct answer: To monitor incoming and outgoing network traffic
Question 10
What is a network threat?
Correct answer: A potential danger that compromises network security
Question 11
A software error in a transportation management system caused delays and disruptions in delivering goods to customers. Which factor contributes to the financial toll of this software error? What factor contributes to the financial toll of this software error?
Correct answer: Decreased operational efficiency
Question 12
Which type of attack allows an attacker to impersonate each party in a communication
Correct answer: OnPath attack
Question 13
Which technique can be used to examine the version and structure of the database in SQL injection?
Correct answer: Examining the database.
Question 14
Which of the following best defines web application security?
Correct answer: Protecting web applications from unauthorized access
Question 15
What is the purpose of UNION attacks in SQL injection?
Correct answer: To retrieve data from different database tables.
Question 16
A software error in a banking system caused transactions to be processed incorrectly, resulting in financial losses for customers. Which factor contributes to the financial toll of this software error? What factor contributes to the financial toll of this software error?
Correct answer: Loss of customer trust
Question 17
What is a zero-day vulnerability?
Correct answer: A vulnerability exploited before it has been patched
Question 18
What is the purpose of a web application firewall (WAF)?
Correct answer: To mitigate common web application vulnerabilities and block malicious traffic
Question 19
While browsing the internet, you come across a website that displays a security warning stating that your computer is infected with a virus. What is the best course of action?
Correct answer: Close the website and run a trusted antivirus scan on your computer.
Question 20
Which of the following is a common type of network threat?
Correct answer: Brute force attack
Question 21
Which feature should be reviewed during a web application security test to identify vulnerabilities like SQL injection and cross-site scripting (XSS)?
Correct answer: Input validation and error handling
Question 22
In SQL injection, what does the double-dash sequence "--" indicate?
Correct answer: A comment indicator in SQL.
Question 23
What is the core functionality of firewall filtering?
Correct answer: Inspecting and making decisions on network packets
Question 24
What type of logic should be reviewed during a web application security test to ensure secure implementation of business functionality?
Correct answer: Business logic
Question 25
What is the purpose of a proxy firewall?
Correct answer: To monitor network traffic at the application level
Question 26
Which type of vulnerability is caused by incorrectly configured systems and applications?
Correct answer: Misconfiguration vulnerability
Question 27
While performing a security audit, you discover that the web application is using an outdated and vulnerable version of a popular software library. What should you recommend?
Correct answer: Immediately update the software library to the latest secure version.
Question 28
Who was responsible for the creation of the Morris Worm?
Correct answer: A student
Question 29
How can SQL injection vulnerabilities be detected manually?
Correct answer: All of the above.
Question 30
What can attackers exploit if APIs are not properly secured?
Correct answer: Sensitive data
Question 31
Which type of attack can delete important files, steal confidential information, or shut down a system?
Correct answer: Virus and malware attack
Question 32
What is the goal of Runtime Application Self Protection (RASP)?
Correct answer: Monitoring and blocking attacks in real time
Question 33
What is the main goal of a SQL injection attack?
Correct answer: To exploit vulnerabilities in web applications
Question 34
You receive a notification on your mobile device from a social media app asking for permission to access your contacts. What should you do?
Correct answer: Decline the request and continue using the app without contact access.
Question 35
What is the purpose of a network vulnerability scan?
Correct answer: To identify weaknesses in a network's security
Question 36
What is the purpose of reviewing application and server configuration during a web application security test?
Correct answer: Identifying potential vulnerabilities related to configurations
Question 37
You receive a notification from your web application's intrusion detection system about a potential SQL injection attack. What should be your immediate response?
Correct answer: Investigate the attack and take necessary measures to mitigate it.
Question 38
During a security assessment, you discover a vulnerability in the web application that could lead to remote code execution. What should be the priority in addressing this vulnerability?
Correct answer: Immediately fix the vulnerability to prevent potential exploit.
Question 39
A software error in a manufacturing system led to a halt in production for several days. Which factor contributes to the financial toll of this software error?
Correct answer: Lost production time
Question 40
Where can SQL injection vulnerabilities occur within a query?
Correct answer: Anywhere within the query, including table and column names.
Question 41
What does NAT stand for in NAT firewalls?
Correct answer: Network Address Translation
Question 42
What was the cause of the Mariner 1 spacecraft's failure?
Correct answer: Human error
Question 43
You receive an email from an unknown sender with an attachment labeled "Important Document." What should you do?
Correct answer: Delete the email without opening the attachment.
Question 44
What caused the financial loss in the Mt. Gox bitcoin exchange incident?
Correct answer: Hacking incident
Question 45
You are conducting a web application security test and discover a critical vulnerability that could potentially compromise user data. What should be your next step?
Correct answer: Immediately inform the development team to fix the vulnerability.
Question 46
A colleague asks you to share your login credentials for a shared work account because they forgot theirs. What is the appropriate response?
Correct answer: Direct them to contact the IT department for assistance.
Question 47
Which of the following is NOT a potential outcome of a web application attack?
Correct answer: Access to restricted content
Question 48
What is the recommended approach to prevent SQL injection?
Correct answer: Using parameterized queries (prepared statements) instead of string concatenation.
Question 49
Which type of firewall examines the data within the packet itself?
Correct answer: Next-generation firewall
Question 50
Which of the following is an example of a security vulnerability?
Correct answer: Misconfiguration
Question 51
Why are outdated software and unpatched software considered security vulnerabilities?
Correct answer: They contain known weaknesses that can be exploited
Question 52
Which type of security test is best suited for critical applications undergoing major changes and involves business logic testing?
Correct answer: Penetration Test
Question 53
A user reports that they received a warning message on the web application about a potential security threat. What should be your response?
Correct answer: Investigate the warning message to identify the security threat.
Question 54
What is SQL injection (SQLi)?
Correct answer: A web security vulnerability that allows unauthorized access to sensitive data.
Question 55
Which type of security test involves sending different types of input to provoke errors and test unexpected behavior?
Correct answer: Dynamic Application Security Test (DAST)
Question 56
A user forgets their password and requests a password reset link. However, they receive a reset link via email without any verification. What should you do to improve security?
Correct answer: Implement additional verification steps before sending the reset link.
Question 57
A software error in a healthcare system resulted in the incorrect administration of medication to patients. Which factor contributes to the financial toll of this software error? What factor contributes to the financial toll of this software error?
Correct answer: Lawsuits and legal costs
Question 58
What is a common method used in password attacks?
Correct answer: Trying all possible password combinations
Question 59
Which type of security test involves scanning source code to find and eliminate software security vulnerabilities?
Correct answer: Static Application Security Test (SAST)
Question 60
Which layer of the TCP/IP protocol stack does firewall filtering operate at?
Correct answer: Layer 3 (Network layer)
Question 61
While using a public Wi-Fi network, you notice a pop-up message on your device offering a free antivirus software download. What should you do?
Correct answer: Disconnect from the Wi-Fi network immediately.
Question 62
Which of the following is an example of a network vulnerability?
Correct answer: Weak password
Question 63
A user is attempting to log in to an application by submitting their username and password. The application uses a SQL query to validate the credentials. However, the application is vulnerable to SQL injection attacks. Which scenario illustrates a successful SQL injection attack in this situation?
Correct answer: The user enters their username as "admin" and their password as "' OR 1=1--".
Question 64
A security researcher contacts you and discloses a critical vulnerability they discovered in your web application. What should be your response?
Correct answer: Thank the researcher for their efforts and immediately fix the vulnerability.
Question 65
What is the primary goal of web security testing?
Correct answer: Finding security vulnerabilities in web applications
Question 66
Which type of firewall remembers information about previously passed packets?
Correct answer: Stateful firewall
Question 67
What is the role of a network gateway?
Correct answer: To connect a local network to another network
Question 68
Which type of attack exploits weaknesses in web applications that use SQL?
Correct answer: SQL injection attack
Question 69
How can organizations defend against zero-day vulnerabilities?
Correct answer: By applying critical security updates promptly
Question 70
Which of the following is an SQL injection example?
Correct answer: All of the above.
Made with Bullet