WGU-C706 SECURE SOFTWARE DESIGN (LESSON 21 CISSP) 100% SOLVED UPDATED&VERIFIED EXAM

Which one of the following types of attacks relies on the difference between the timing of two events? TOCTOU What technique may be used to limit the effectiveness of rainbow table attacks? Salting What character should always be treated carefully when encountered as user input on a web form? ' What type of virus utilizes more than one propagation technique to maximize the number of penetrated systems? Multipartite virus What advanced virus technique modifies the malicious code of a virus on each system it infects? Polymorphism Which one of the following passwords is least likely to be compromised during a dictionary attack? fsas3alG What worm was the first to cause major physical damage to a facility? Stuxnet What type of application vulnerability most directly allows an attacker to modify the contents of a system's memory? Buffer overflow What is the most commonly used technique to protect against virus attacks? Signature detection hat HTML tag is often used as part of a cross-site scripting (XSS) attack? SCIRPT What technology does the Java language use to minimize the threat posed by applets? Sandbox You are the security administrator for an e-commerce company and are placing a new web server into production. What network zone should you use? DMZ What condition is necessary on a web page for it to be used in a cross-site scripting attack? Reflection input Which one of the following techniques is most closely associated with APT attacks? Zero-day exploit What is the most effective defense against cross-site scripting attacks? Input validation Ben's system was infected by malicious code that modified the operating system to allow the malicious code author to gain access to his files. What type of exploit did this attacker engage in? Back door What database technology, if implemented for web forms, can limit the potential for SQL injection attacks? Stored procedures What type of reconnaissance attack provides attackers with useful information about the services running on a system? Port scan