CS6262 Final Study Set exam with correct answers

CS6262 Final Study Set exam with |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




correct answers |||\\\




T/F: An attacker that uses large botnet to make requests to a server to flood is an example of
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




amplification attack. - correct answersTrue |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




T/F: Unlike UDP, TCP has the necessary safeguards in place to prevent network DoS. - correct
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




answersFalse



Which of the following actors are part of the cyber crime underground economy?
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Exploit Developers |||\\\




Botnet Masters |||\\\




Spammers

All of the above - correct answersAll of the above
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Which of the following is/are NOT a potential network DoS mitigation? Select multiple.
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Client Puzzles |||\\\




CAPTCHAs

Source Identification |||\\\




Use only TCP |||\\\ |||\\\




Increase UDP 3-way handshake - correct answersCAPTCHAs |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Use only TCP |||\\\ |||\\\




Increase UDP 3-way handshake |||\\\ |||\\\ |||\\\




In 2015, GitHub was a victim of a distributed denial of service attack. The attackers injected
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




malicious JavaScript code in GitHub's web pages. - correct answersFalse |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\

, T/F: A website ""http://gatech.edu"" is able to set or overwrite cookies from the website
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




""https://gatech.edu"". The server is not able to distinguish the overwritten cookies from the |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




original cookies. This is an example of violation of session integrity. - correct answersTrue
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Which is INCORRECT regarding the session token? |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Tokens will expire, but there should still be mechanisms to revoke them if necessary
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Token size, like cookie size, is not a concern |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




The token must be stored somewhere
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\




All of them - correct answersToken size, like cookie size, is not a concern
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




T/F: The HTTPS lock icon on the webpage is only displayed after all elements on a webpage are
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




fetched using HTTPS, a valid HTTPS cert is issued by a trusted certificate authority for all elements,
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




and the domain in the URL matches CommonName or SubjectAlternativeName in cert. - correct
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




answersTrue



The following question is from the recommended reading "Exposing Private Information by Timing
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Web Applications". Which of these are valid defenses by web applications to resist timing attacks?
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Adding random delay to the response |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Both the answer choices are correct
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\




Taking constant amount of time always for processing a request - correct answersTaking constant
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




amount of time always for processing a request |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




You are visiting a page that contains two iframes: http://example.com Links to an external site. and
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




https://example.com Links to an external site.. They can access each other's content directly. -
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\




correct answersFalse |||\\\ |||\\\




T/F: HTTPS encrypts the host address to protect the user's privacy. - correct answersFalse
|||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\ |||\\\