Client Side Attacks || with Complete Solutions.
________________ is when an individual is manipulated to perform an action or reveal
information that may compromise a target. correct answers social engineering
_______________ is considered the most successful and sought out method to exploit a target.
correct answers social engineering
_______________is a form of attack in which untrusted Javascript is injected into a trusted
website. correct answers cross-site scripting
True/False Attackers are rarely successful with client side attacks because of the limited number
of configuration variables as well as the low amount of user interaction. correct answers false;
____________ means that a user's SQL input or data is checked for items that might harm the
database. correct answers sanitization
What type of attack is initiated when the victim downloads content from the attacker. correct
answers client-side
____________ checks inputs to ensure that it meets a criteria. correct answers validation
What is the target of an XSS: correct answers Visitor's browser
What are the two types of XSS? correct answers reflected, stored
When the code of the targeted file is replaced with the infected code, this is known as: correct
answers Overwriting
What may store information pertaining to a session and track client's other personal data? correct
answers Cookies
Viruses have a naming convention, established by Symantec, that involves alphanumeric
characters, underscores, spaces. Each section is limited to how many characters? correct answers
20
True/False Social engineering occurs when a malicious actor leverages access to a user's session
cookies in order to impersonate that user. correct answers false
Determine whether the XSS method presented is reflected or stored: When the injected script is
reflected off the web server. correct answers reflected
Determine whether the XSS method presented is reflected or stored: When the injected script is
permanently stored on the target servers. correct answers stored
________________ is when an individual is manipulated to perform an action or reveal
information that may compromise a target. correct answers social engineering
_______________ is considered the most successful and sought out method to exploit a target.
correct answers social engineering
_______________is a form of attack in which untrusted Javascript is injected into a trusted
website. correct answers cross-site scripting
True/False Attackers are rarely successful with client side attacks because of the limited number
of configuration variables as well as the low amount of user interaction. correct answers false;
____________ means that a user's SQL input or data is checked for items that might harm the
database. correct answers sanitization
What type of attack is initiated when the victim downloads content from the attacker. correct
answers client-side
____________ checks inputs to ensure that it meets a criteria. correct answers validation
What is the target of an XSS: correct answers Visitor's browser
What are the two types of XSS? correct answers reflected, stored
When the code of the targeted file is replaced with the infected code, this is known as: correct
answers Overwriting
What may store information pertaining to a session and track client's other personal data? correct
answers Cookies
Viruses have a naming convention, established by Symantec, that involves alphanumeric
characters, underscores, spaces. Each section is limited to how many characters? correct answers
20
True/False Social engineering occurs when a malicious actor leverages access to a user's session
cookies in order to impersonate that user. correct answers false
Determine whether the XSS method presented is reflected or stored: When the injected script is
reflected off the web server. correct answers reflected
Determine whether the XSS method presented is reflected or stored: When the injected script is
permanently stored on the target servers. correct answers stored
