Deep Dive - Injection Vulnerability

 

#cybersecurity #coursera #quiz #solution #network 

1.

Question 1

Which of the following statements is True?

1 point

Injection attacks were ranked #1 on the OWASP Top 10 list in 2013 and again in 2017.

Injection attacks were ranked #1 on the OWASP Top 10 list in 2013 but dropped below the top 10 in 2017.

Injection attacks were ranked below the top 10 on the OWASP Top 10 list in 2013 but have risen to the #3 slot in 2017.

Injection attacks are recognized by OWASP as important, but have never made the Top 10 list.

2.

Question 2

Which vulnerability is being exploited in an OS Command Injection attack?

1 point

Vulnerabilities in the operating system shell interpreter.

Improperly configured security settings in the MySQL database.

Poor user input sanitation and unsafe execution of OS commands.

Vulnerabilities in the operating system kernel.

3.

Question 3

What is a simple but effective way to protect against DLL hijacking?

1 point

Avoid using DLL libraries in commercial applications where security is a concern.

Always use explicit paths to the commands or library applications.

Write-protect the folders that contain your libraries.

Use only hijack resistant open-source libraries whenever possible.

4.

Question 4

True or False: Safe coding practice runs code with the least possible privilege.

1 point

True

False

5.

Question 5

True or False: Safe coding practice always specifies relative paths when running applications or using shared libraries.

1 point

True

False

6.

Question 6

True or False: Safe coding practice does not let user input reach an OS command unchanged.

1 point

True

False

7.

Question 7

A hacker exfiltrating data by injecting an HTTPrequest command is an example of which type of SQL Injection attack?

1 point

Error-based

Out of Band

UNION-based

Blind injection

8.

Question 8

Protecting against SQL Injection attacks by sanitizing user input can be accomplished by which two (2) of the following techniques?

1 point

Use of blacklists.

Use of mapping tables.

Use of whitelists.

Use of an SQL command interpreter to precompile user input.

9.

Question 9

True or False: Limiting database user permissions is an ineffective strategy in preventing SQL Injection attacks since the injected code will run directly against the database regardless of the permission levels that have been set.

1 point

True

False

10.

Question 10

Which of the following will help reduce the SQL Injection attack surface?

1 point

Use of stored procedures.

Direct use of native operating system commands.

Showing users the exact nature of database input errors.

Direct SQL execution from user input values.

11.

Question 11

When developing an application, using NoSQL instead of MySQL will have what effect on the applications susceptibility to SQL Injection attacks?

1 point

It will eliminate the injection attack surface.

It will reduce, but not eliminate, the injection attack surface.

It will have no impact on the risk of an injection attack.

It will increase the risk of an injection attack.