{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

An application is best described as:

A security tool that prevents all cyber attacks

A physical device that protects a computer network

A program that runs instructions on a computer and can operate locally or through a network

A type of database used to store user information

1

A company uses a web-based form that allows users to type anything into a field, and the input is processed without any checks. What is the main security concern?

The database will stop storing any new information

The website will stop functioning permanently

The application will automatically delete all user accounts

The application may accept unexpected input that could be exploited

1

A developer requires that a field labeled “Number of Items” only accept numeric input. This is an example of:

Firewall configuration

Encryption

Database indexing

Data sanitization (input validation)

1

An online store uses user input directly inside a database query without checking or filtering it first. What vulnerability does this create?

Phishing

Cross-site scripting

SQL injection

Buffer overflow

1

An attacker enters specially formatted text into a search bar and is able to view more database records than intended. What type of attack is most likely occurring?

SQL injection

Malware installation

Denial-of-service attack

Buffer overflow

1

The primary goal of an SQL injection attack is to:

Break the physical server

Block all network traffic permanently

Install antivirus software on the system

Access, modify, or delete database information by manipulating queries

1

A website stores sensitive information in a user’s browser using JavaScript. Why can this be risky?

Because databases automatically encrypt all browser data

JavaScript runs in the browser and can access data stored there

Because HTML cannot display text properly

Because servers cannot process JavaScript

1

A malicious user posts hidden script code in a website’s comment section. When other users visit the page, the script runs automatically in their browsers. What type of attack is this?

Stored cross-site scripting (XSS)

Buffer overflow

Data sanitization

SQL injection

1

A user clicks a link that contains malicious script embedded in the URL, and the script executes in their browser. What type of attack is this?

SQL injection

Privilege escalation

Reflected cross-site scripting

Stored cross-site scripting

1

In a buffer system, what is a buffer?

A network security firewall

A fixed-size section of memory used to store input

A database query language

A type of encryption key

1

A program does not limit the length of user input, and a user enters extremely large data that overwrites adjacent memory. What vulnerability is being exploited?

Input encryption

Buffer overflow

SQL injection

Cross-site scripting

1

What is a possible result of a successful buffer overflow attack?

The website changes its appearance

The database becomes faster

User passwords are automatically encrypted

The system crashes or executes unauthorized code

1

Which situation best describes a breach of confidentiality caused by an application attack?

Unauthorized users are able to view sensitive information

A computer hardware component fails

Data is deleted from a database

A website loads slowly

1

Which situation best describes a breach of integrity?

A webpage changes color

Data in a database is modified or deleted without permission

A user cannot connect to Wi-Fi

A server loses power

1

A company improves security by checking user input before processing it and rejecting unexpected characters. This practice helps prevent which types of attacks?

SQL injection, cross-site scripting, and other input-based attacks

Only phishing emails

Only buffer overflow

Only hardware failures

AP Cybersecurity: 5.1C - Check for Understanding Questions

AP Cybersecurity: 5.1C - Check for Understanding Questions

An application is best described as:

A company uses a web-based form that allows users to type anything into a field, and the input is processed without any checks. What is the main security concern?

A developer requires that a field labeled “Number of Items” only accept numeric input. This is an example of:

An online store uses user input directly inside a database query without checking or filtering it first. What vulnerability does this create?

An attacker enters specially formatted text into a search bar and is able to view more database records than intended. What type of attack is most likely occurring?

The primary goal of an SQL injection attack is to:

A website stores sensitive information in a user’s browser using JavaScript. Why can this be risky?

A malicious user posts hidden script code in a website’s comment section. When other users visit the page, the script runs automatically in their browsers. What type of attack is this?

A user clicks a link that contains malicious script embedded in the URL, and the script executes in their browser. What type of attack is this?

In a buffer system, what is a buffer?

A program does not limit the length of user input, and a user enters extremely large data that overwrites adjacent memory. What vulnerability is being exploited?

What is a possible result of a successful buffer overflow attack?

Which situation best describes a breach of confidentiality caused by an application attack?

Which situation best describes a breach of integrity?

A company improves security by checking user input before processing it and rejecting unexpected characters. This practice helps prevent which types of attacks?

An application is best described as:

A company uses a web-based form that allows users to type anything into a field, and the input is processed without any checks. What is the main security concern?

A developer requires that a field labeled “Number of Items” only accept numeric input. This is an example of:

An online store uses user input directly inside a database query without checking or filtering it first. What vulnerability does this create?

An attacker enters specially formatted text into a search bar and is able to view more database records than intended. What type of attack is most likely occurring?

The primary goal of an SQL injection attack is to:

A website stores sensitive information in a user’s browser using JavaScript. Why can this be risky?

A malicious user posts hidden script code in a website’s comment section. When other users visit the page, the script runs automatically in their browsers. What type of attack is this?

A user clicks a link that contains malicious script embedded in the URL, and the script executes in their browser. What type of attack is this?

In a buffer system, what is a buffer?

A program does not limit the length of user input, and a user enters extremely large data that overwrites adjacent memory. What vulnerability is being exploited?

What is a possible result of a successful buffer overflow attack?

Which situation best describes a breach of confidentiality caused by an application attack?

Which situation best describes a breach of integrity?

A company improves security by checking user input before processing it and rejecting unexpected characters. This practice helps prevent which types of attacks?