C836 WGU Comprehensive Test Bank Final Exam
2026-2027 Complete Questions & Accurate Detailed
Answers\ Actual Final Exam Preparation || Latest
Update
XSRF (cross-site request forgery)
an attack in which the attacker places a link on a web page in such a way
that it will be automatically executed to initiate a particular activity on
another web page or application where the user is currently
authenticated
clickjacking
An attack that takes advantage of the graphical display capabilities of
our browser to trick us into clicking on something we might not
otherwise
server-side attack
A type of attack on the web server that can target vulnerabilities such as
lack of input validation, improper or inadequate permissions, or
extraneous files left on the server from the development process
,Protocol issues, unauthenticated access, arbitrary code execution, and
privilege escalation
Name the 4 main categories of database security issues
web application analysis tool
A type of tool that analyzes web pages or web-based applications and
searches for common flaws such as XSS or SQL injection flaws, and
improperly set permissions, extraneous files, outdated software
versions, and many more such items
protocol issues
unauthenticated flaws in network protocols, authenticated flaws in
network protocols, flaws in authentication protocols
arbitrary code execution
An attack that exploits an applications vulnerability into allowing the
attacker to execute commands on a user's computer.
* arbitrary code execution in intrinsic or securable SQL elements
,Privilege Escalation
An attack that exploits a vulnerability in software to gain access to
resources that the user normally would be restricted from accessing.
* via SQL injection or local issues
validating user inputs
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
, Nikto (and Wikto)
A web server analysis tool that performs checks for many common
server-side vulnerabilities & creates an index of all the files and
directories it can see on the target web server (a process known as
spidering)
burp suite
A well-known GUI web analysis tool that offers a free and professional
version; the pro version includes advanced tools for conducting more
in-depth attacks
fuzzer
A type of tool that works by bombarding our applications with all
manner of data and inputs from a wide variety of sources, in the hope
that we can cause the application to fail or to perform in unexpected
ways
2026-2027 Complete Questions & Accurate Detailed
Answers\ Actual Final Exam Preparation || Latest
Update
XSRF (cross-site request forgery)
an attack in which the attacker places a link on a web page in such a way
that it will be automatically executed to initiate a particular activity on
another web page or application where the user is currently
authenticated
clickjacking
An attack that takes advantage of the graphical display capabilities of
our browser to trick us into clicking on something we might not
otherwise
server-side attack
A type of attack on the web server that can target vulnerabilities such as
lack of input validation, improper or inadequate permissions, or
extraneous files left on the server from the development process
,Protocol issues, unauthenticated access, arbitrary code execution, and
privilege escalation
Name the 4 main categories of database security issues
web application analysis tool
A type of tool that analyzes web pages or web-based applications and
searches for common flaws such as XSS or SQL injection flaws, and
improperly set permissions, extraneous files, outdated software
versions, and many more such items
protocol issues
unauthenticated flaws in network protocols, authenticated flaws in
network protocols, flaws in authentication protocols
arbitrary code execution
An attack that exploits an applications vulnerability into allowing the
attacker to execute commands on a user's computer.
* arbitrary code execution in intrinsic or securable SQL elements
,Privilege Escalation
An attack that exploits a vulnerability in software to gain access to
resources that the user normally would be restricted from accessing.
* via SQL injection or local issues
validating user inputs
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
, Nikto (and Wikto)
A web server analysis tool that performs checks for many common
server-side vulnerabilities & creates an index of all the files and
directories it can see on the target web server (a process known as
spidering)
burp suite
A well-known GUI web analysis tool that offers a free and professional
version; the pro version includes advanced tools for conducting more
in-depth attacks
fuzzer
A type of tool that works by bombarding our applications with all
manner of data and inputs from a wide variety of sources, in the hope
that we can cause the application to fail or to perform in unexpected
ways
