Copy of Cybersecurity Week 5 – Quiz – Student Portal

What is the primary purpose of Input Validation?

Encrypt user data

Correct Incorrect Correct answer

Prevent unauthorized access

Correct Incorrect Correct answer

Accept only expected and safe input

Correct Incorrect Correct answer

Improve server performance

Correct Incorrect Correct answer

Which of the following prevents XSS attacks?

Strong password policy

Correct Incorrect Correct answer

Disabling cookies

Correct Incorrect Correct answer

Output encoding

Correct Incorrect Correct answer

SQL encryption

Correct Incorrect Correct answer

What is the role of the Content-Security-Policy (CSP) header?

Encrypts user data

Correct Incorrect Correct answer

Prevents brute force attacks

Correct Incorrect Correct answer

Controls what content is allowed to load in the browser

Correct Incorrect Correct answer

Protects against SQL injection

Correct Incorrect Correct answer

In the attack chain, what is the second step?

Exploit

Correct Incorrect Correct answer

Discover

Correct Incorrect Correct answer

Inject

Correct Incorrect Correct answer

Delete

Correct Incorrect Correct answer

What does DVWA stand for?

Digital Vulnerability Web Application

Correct Incorrect Correct answer

Damn Vulnerable Web Application

Correct Incorrect Correct answer

Default Virtual Web App

Correct Incorrect Correct answer

Dynamic Validation Web Architecture

Correct Incorrect Correct answer

Which command is used to start Apache2 in Kali Linux?

apache2 -run

Correct Incorrect Correct answer

service apache2 start

Correct Incorrect Correct answer

apachectl stop

Correct Incorrect Correct answer

systemctl php start

Correct Incorrect Correct answer

What tool is commonly used to intercept and modify HTTP requests?

Wireshark

Correct Incorrect Correct answer

Nmap

Correct Incorrect Correct answer

Burp Suite

Correct Incorrect Correct answer

Metasploit

Correct Incorrect Correct answer

Which of the following is a purpose of Multi-Factor Authentication (MFA)?

Speed up login

Correct Incorrect Correct answer

Reduce CAPTCHA usage

Correct Incorrect Correct answer

Add an extra layer of login security

Correct Incorrect Correct answer

Improve session timeout

Correct Incorrect Correct answer

What is the function of allow_url_include in PHP?

Disables cookies

Correct Incorrect Correct answer

Allows remote file inclusion

Correct Incorrect Correct answer

Encrypts variables

Correct Incorrect Correct answer

Activates email functionality

Correct Incorrect Correct answer

What does X-Frame-Options protect against?

SQL injection

Correct Incorrect Correct answer

Cross-Site Scripting

Correct Incorrect Correct answer

Clickjacking

Correct Incorrect Correct answer

Cookie theft

Correct Incorrect Correct answer

Which OWASP Top 10 vulnerability involves unauthorized access to data via modified IDs or parameters?

Cross-Site Request Forgery

Correct Incorrect Correct answer

Insecure Deserialization

Correct Incorrect Correct answer

Insecure Direct Object Reference (IDOR)

Correct Incorrect Correct answer

Cross-Origin Access

Correct Incorrect Correct answer

What is the best response to incorrect login attempts?

Tell user which part is wrong

Correct Incorrect Correct answer

Send reset link immediately

Correct Incorrect Correct answer

Display 'Invalid credentials' without revealing specifics

Correct Incorrect Correct answer

Block the IP immediately

Correct Incorrect Correct answer

What’s the correct order of the Web Attack Chain?

Inject → Find → Exploit

Correct Incorrect Correct answer

Find → Exploit → Inject

Correct Incorrect Correct answer

Exploit → Inject → Find

Correct Incorrect Correct answer

Find → Inject → Exploit

Correct Incorrect Correct answer

Which of the following is NOT a security header?

X-Content-Type-Options

Correct Incorrect Correct answer

Content-Security-Policy

Correct Incorrect Correct answer

HTTPOnly-Cookie

Correct Incorrect Correct answer

X-Frame-Options

Correct Incorrect Correct answer

What is the purpose of setting HttpOnly on a cookie?

It expires faster

Correct Incorrect Correct answer

JavaScript cannot access the cookie

Correct Incorrect Correct answer

Makes cookie encrypted

Correct Incorrect Correct answer

Prevents server errors

Correct Incorrect Correct answer

What tool is used to scan for web vulnerabilities and has an intercept proxy like Burp Suite?

OWASP ZAP

Correct Incorrect Correct answer

Nmap

Correct Incorrect Correct answer

Wireshark

Correct Incorrect Correct answer

OpenVAS

Correct Incorrect Correct answer

What type of attack is being attempted with this input: ‘; DROP TABLE users;–?

XSS

Correct Incorrect Correct answer

CSRF

Correct Incorrect Correct answer

SQL Injection

Correct Incorrect Correct answer

Command Injection

Correct Incorrect Correct answer

What does CSRF stand for?

Critical Site Runtime Firewall

Correct Incorrect Correct answer

Cross-Site Request Forgery

Correct Incorrect Correct answer

Cross Script Routing Failure

Correct Incorrect Correct answer

Cookie Steal Request Function

Correct Incorrect Correct answer

What is the correct use of output encoding?

To display user input as safe text

Correct Incorrect Correct answer

To store passwords securely

Correct Incorrect Correct answer

To prevent form submission

Correct Incorrect Correct answer

To compress HTML content

Correct Incorrect Correct answer

Which header enforces HTTPS-only access from browsers?

X-XSS-Protection

Correct Incorrect Correct answer

Strict-Transport-Security

Correct Incorrect Correct answer

Content-Security-Policy

Correct Incorrect Correct answer

Referrer-Policy

Correct Incorrect Correct answer

Copy of Cybersecurity Week 5 – Quiz

Copy of Cybersecurity Week 5 – Quiz

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question