Web Security: Threats, Measures, and Protocols

Question 1

Which of the following is NOT a common web security threat?

Accepted Answer

Heap overflow

Answer

SQL injection

Answer

Cross-site scripting

Answer

Broken authentication

Question 2

What is the primary purpose of a firewall in a web security context?

Accepted Answer

To filter incoming and outgoing network traffic based on predefined security rules

Answer

To detect and prevent malicious code from infiltrating a system

Answer

To monitor and log user activity

Answer

To encrypt sensitive data

Question 3

What is the fundamental difference between HTTP and HTTPS?

Accepted Answer

HTTPS is secure, while HTTP is not

Answer

HTTP is secure, while HTTPS is not

Answer

They are both secure protocols

Answer

They are both non-secure protocols

Question 4

What is the role of a security vulnerability assessment in web security?

Accepted Answer

To identify potential weaknesses in a web system that could be exploited by attackers

Answer

To protect a web system from attacks

Answer

To monitor web traffic for suspicious activity

Answer

To recover data in the event of a security breach

Question 5

What is the purpose of a penetration test in web security?

Accepted Answer

To simulate an attack on a web system to identify vulnerabilities that could be exploited by attackers

Answer

To protect a web system from hackers

Answer

To recover data in the event of a security breach

Answer

To monitor web traffic for suspicious activity

Question 6

Which of these is NOT a common web security threat?

Accepted Answer

D. Buffer overflow

Answer

A. SQL injection

Answer

B. Cross-site scripting

Answer

C. XML entity expansion

Question 7

Which of the following is NOT a type of web application firewall (WAF)?

Accepted Answer

Access control list (ACL)

Answer

Stateful inspection

Answer

Signature-based detection

Answer

Heuristic analysis

Question 8

Which of the following is NOT a common web security threat?

Accepted Answer

Plagiarism

Answer

Phishing

Answer

Spam

Answer

Malware

Question 9

Which protocol is used to encrypt web traffic securely?

Accepted Answer

HTTPS

Answer

HTTP

Answer

FTP

Answer

SMTP

Question 10

Which of the following is a best practice for creating strong and secure passwords?

Accepted Answer

Use a combination of uppercase, lowercase, numbers, and symbols

Answer

Use the same password for multiple accounts

Answer

Include personal information in the password

Answer

Make the password short and easy to remember

Question 11

What is the fundamental difference between symmetric and asymmetric encryption?

Accepted Answer

Symmetric encryption uses a single key, while asymmetric encryption uses two keys.

Answer

Asymmetric encryption is faster than symmetric encryption.

Answer

Symmetric encryption is more secure than asymmetric encryption.

Answer

There is no difference between symmetric and asymmetric encryption.

Question 12

Which type of web attack is designed to target a specific website or service, making it temporarily unavailable?

Accepted Answer

DDoS

Answer

Phishing

Answer

Malware

Answer

Spam

Question 13

What is a web application firewall (WAF)?

Accepted Answer

A security device that protects against web-based attacks

Answer

A software tool that scans websites for vulnerabilities

Answer

A network security device that blocks unauthorised traffic

Answer

A testing tool for evaluating the security of websites

Question 14

Identify the option that is NOT a recognized web application vulnerability.

Accepted Answer

Excessive use of JavaScript

Answer

Cross-site scripting (XSS)

Answer

Buffer overflow

Answer

SQL injection

Question 15

What is the primary function of a firewall in web security?

Accepted Answer

Filtering incoming network traffic based on predefined rules

Answer

Detecting and blocking malicious software

Answer

Encrypting sensitive data transmitted over the network

Answer

Monitoring web server activity and detecting suspicious behavior

Question 16

What is the main objective of penetration testing in the context of web security?

Accepted Answer

Identifying potential vulnerabilities within a web application

Answer

Preventing unauthorized access to sensitive data

Answer

Detecting and mitigating malware infections

Answer

Managing security patches and updates

Question 17

What is the primary purpose of a Content Security Policy (CSP) in web security?

Accepted Answer

Restricting the types of external resources that can be loaded into a web page

Answer

Preventing cross-site scripting (XSS) attacks

Answer

Encrypting sensitive data transmitted over the network

Answer

Blocking access to malicious websites

Question 18

What is the primary purpose of a web application firewall (WAF)?

Accepted Answer

Detecting and mitigating vulnerabilities in web applications

Answer

Preventing unauthorized access to the web server

Answer

Encrypting sensitive data transmitted over the network

Answer

Monitoring web server activity and detecting suspicious behavior

Question 19

Explain the fundamental difference between symmetric and asymmetric encryption in the context of web security.

Accepted Answer

Symmetric encryption utilizes the same key for both encryption and decryption, while asymmetric encryption employs different keys for each process.

Answer

Asymmetric encryption utilizes the same key for both encryption and decryption, while symmetric encryption employs different keys for each process.

Answer

Both symmetric and asymmetric encryption use the same key for both encryption and decryption.

Answer

Neither symmetric nor asymmetric encryption requires the use of keys.

Question 20

Which of the following is NOT a common type of web security threat?

Accepted Answer

Hardware failure

Answer

Phishing

Answer

Malware

Answer

SQL Injection

Question 21

Which of the following protocols is used to encrypt data transmitted over the web?

Accepted Answer

HTTPS

Answer

HTTP

Answer

FTP

Answer

SMTP

Question 22

What is the primary function of a firewall in web security?

Accepted Answer

To block unauthorized access to a network

Answer

To detect and prevent malware

Answer

To encrypt data transmitted over the web

Answer

To authenticate users

Question 23

What is the role of a web application firewall (WAF)?

Accepted Answer

To filter incoming traffic for malicious content

Answer

To monitor web traffic for suspicious activity

Answer

To block access to specific IP addresses

Answer

To encrypt data transmitted over the web

Question 24

What is the purpose of a security audit in web development?

Accepted Answer

To identify and address potential security vulnerabilities

Answer

To test the website's performance

Answer

To ensure compliance with regulatory standards

Answer

To monitor web traffic for suspicious activity

Question 25

Which of the following is NOT a common type of web security threat?

Accepted Answer

Cloud security

Answer

Malware

Answer

Phishing

Answer

SQL injection

Question 26

Which protocol ensures data sent over the web is encrypted?

Accepted Answer

HTTPS

Answer

HTTP

Answer

FTP

Answer

TCP/IP

Question 27

What is the primary function of a firewall in web security?

Accepted Answer

Preventing unauthorized access to a network

Answer

Detecting and removing malicious software

Answer

Encrypting data transmitted over the web

Answer

Backing up website data

Question 28

How do worms differ from viruses?

Accepted Answer

Worms replicate independently, while viruses require a host file

Answer

Worms are more destructive than viruses

Answer

Viruses can only spread via email attachments, while worms can use networks

Answer

Worms are designed to steal data, while viruses are not

Question 29

What is the purpose of a web application firewall (WAF)?

Accepted Answer

Monitoring and filtering web traffic to detect and block malicious activity

Answer

Encrypting data transmitted over the web

Answer

Preventing unauthorized access to a network

Answer

Performing vulnerability assessments

Question 30

Which practice is NOT recommended for protecting sensitive online data?

Accepted Answer

Sharing sensitive information with untrustworthy third parties

Answer

Using strong passwords and two-factor authentication

Answer

Storing data in encrypted form

Answer

Regularly backing up data to a secure location

Question 31

Which of the following is NOT a common threat to web security?

Accepted Answer

Data encryption

Answer

Cross-Site Scripting (XSS)

Answer

Phishing

Answer

Buffer overflow

Question 32

What is the main distinction between symmetric and asymmetric encryption?

Accepted Answer

Asymmetric encryption uses different keys for encryption and decryption, while symmetric encryption uses the same key.

Answer

Symmetric encryption uses different keys for encryption and decryption, while asymmetric encryption uses the same key.

Answer

Symmetric encryption is more computationally efficient than asymmetric encryption.

Answer

Asymmetric encryption provides higher security than symmetric encryption.

Question 33

What is the primary role of a penetration tester in the context of web security?

Accepted Answer

To identify vulnerabilities in a website's security architecture and exploit them

Answer

To design and implement security controls for a website

Answer

To monitor a website's security logs and alerts

Answer

To conduct security awareness training for website administrators

Question 34

Which of the following is NOT a type of malware that can infect websites?

Accepted Answer

Spam filters

Answer

Viruses

Answer

Trojan horses

Answer

Ransomware

Question 35

What is the main function of a web application firewall (WAF)?

Accepted Answer

To monitor incoming traffic and block malicious requests

Answer

To encrypt data transmissions between a website and a visitor's browser

Answer

To manage user authentication and authorization

Answer

To detect and mitigate DDoS attacks

Question 36

Which of the following is a common web security threat used to trick users into revealing confidential information?

Accepted Answer

Phishing

Answer

Spam

Answer

DDoS attack

Answer

Malware

Question 37

Which of the following is a primary method of protecting against SQL injection attacks that involves validating user input to prevent malicious SQL queries?

Accepted Answer

Input validation

Answer

Firewalls

Answer

Intrusion detection systems

Answer

Anti-virus software

Question 38

What is the primary purpose of a web application firewall (WAF)?

Accepted Answer

To filter and block malicious HTTP traffic targeting web applications

Answer

To scan web applications for vulnerabilities

Answer

To detect and respond to DDoS attacks

Answer

To encrypt web traffic

Question 39

Which of the following is a best practice for preventing cross-site scripting (XSS) attacks that involves encoding user input to prevent malicious scripts from being executed?

Accepted Answer

Input encoding

Answer

Using strong passwords

Answer

Disabling JavaScript on the website

Answer

Regularly updating software

Question 40

What is the importance of patch management in web security?

Accepted Answer

To fix security vulnerabilities in software that could be exploited by attackers

Answer

To improve website performance

Answer

To detect and block malware

Answer

To encrypt web traffic

Question 41

Which of the following is a benefit of implementing multi-factor authentication for online accounts?

Accepted Answer

Increased account security by requiring multiple forms of verification

Answer

Improved user experience

Answer

Reduced risk of phishing attacks

Answer

Faster website load times

Question 42

What is the purpose of a honeypot in cybersecurity?

Accepted Answer

To detect and trap attackers by mimicking a vulnerable system

Answer

To prevent DDoS attacks

Answer

To encrypt web traffic

Answer

To scan websites for vulnerabilities

Question 43

What role does security awareness training play in web security?

Accepted Answer

Educates employees on cybersecurity risks and best practices

Answer

Provides technical skills for managing web security

Answer

Automates security processes

Answer

Monitors network traffic for suspicious activity

Question 44

How does encryption enhance the security of websites?

Accepted Answer

Encryption ensures data privacy and integrity during transmission.

Answer

Encryption optimizes website speed by reducing traffic.

Answer

Encryption blocks unauthorized website access by denying user requests.

Question 45

Out of the following scenarios, which is NOT a common web security threat?

Accepted Answer

Secure Socket Layer (SSL) certificates

Answer

SQL Injection attacks

Answer

Cross-Site Scripting (XSS)

Answer

Phishing attempts

Question 46

A company's website has been experiencing an increase in unauthorized access attempts. Which security measure would be most effective in addressing this issue?

Accepted Answer

Implementing a strong and configured firewall

Answer

ослабляя политику паролей

Answer

Disabling user authentication

Question 47

What is the full name of HTTPS, and what is its key function in web security?

Accepted Answer

Hypertext Transfer Protocol Secure - To encrypt communication between a website and a user's browser

Answer

Hypertext Transfer Protocol Secure - To ensure website availability

Answer

Hypertext Text Protocol Secure - To block malicious website content

Question 48

Which of the following is NOT a recommended practice for creating a strong password?

Accepted Answer

Using personal information like your birthdate

Answer

Including numbers and symbols

Answer

Using a combination of uppercase and lowercase letters

Question 49

A user receives an email that appears to be from a legitimate source, requesting them to provide personal information by clicking on a link. What type of attack is this?

Accepted Answer

Phishing

Answer

Cross-Site Scripting

Answer

SQL Injection

Answer

Denial of Service

Question 50

What is the purpose of a digital certificate in web security?

Accepted Answer

To verify the authenticity of a website and secure online communication

Answer

To manage website user login credentials

Answer

To keep track of a user's online activity

Question 51

What is the main function of a network firewall in web security?

Accepted Answer

To prevent unauthorized access to a network or device

Answer

To detect and remove malware

Answer

To encrypt data transferred over the internet

Question 52

Which security measure helps protect against Cross-Site Scripting (XSS) attacks?

Accepted Answer

Proper input validation and data sanitization

Answer

Stronger password policies

Answer

Using a VPN

Answer

Disabling JavaScript

Question 53

What is the fundamental difference between cookies and sessions in web security?

Accepted Answer

Cookies store data on the user's device, while sessions store data on the server

Answer

Cookies are temporary, while sessions are persistent

Answer

Cookies are used for authentication, while sessions are used for authorization

Question 54

Which of the following is a common vulnerability that attackers target to access sensitive information on a website?

Accepted Answer

Unpatched software vulnerabilities

Answer

Robust encryption algorithms

Answer

Frequent security audits

Answer

Two-step authentication