Question Details

most effective countermeasure against script injection attacks





1. A user, Bill, has posted a link on a web site that causes unsuspecting users
to transfer money to Bill if they click the link. The link will only work for
users who happen to be authenticated to the bank that is the target of the
link. This is known as:
a. Cross site request forgery
b. Cross-site scripting
c. Broken authentication
d. Replay attack


2. What is the most effective countermeasure against script injection attacks?
a. Stateful inspection firewall
b. Disallow server-side scripting in the end user- browser configuration
c. Filter scripting characters in all input fields
d. Disallow client-side scripting in the end user- browser configuration


3. A database administrator (DBA) is responsible for carrying out security
policy, which includes controlling which users have access to which data.
The DBA has been asked to make just certain fields in some database
tables visible to some new users. What is the best course of action for the
DBA to take?
a. Implement column-based access controls
b. Export the table to a data warehouse, including only the fields that the
users are permitted to see
c. Clone the table, including only the fields that the users are permitted to
see
d. Create a view that contains only the fields that the users are
permitted to see


4. The purpose of Data Control Language is:
a. Define which users are able to view and manipulate data in a
database
b. Define data structures in a relational database
c. Define data structures in an object-oriented database
d. Retrieve, insert, delete and update data in a relational database


5. A list of all of the significant events that occur in an application is known
as:
a. Audit log
b. Replay log
c. Export file
d. Data dump







Computer Science Assignment Help, Computer Science Homework help, Computer Science Study Help, Computer Science Course Help