B.S.W.E. Bachelor of Software Engineering Computer Networks & Security 2

Question 1

What is a SQL injection attack?

Accepted Answer

Inserting malicious SQL code into an input field to manipulate or exploit a database

Answer

Injecting malware into a SQL Server installation

Answer

Overloading a database server with excessive queries

Answer

Intercepting SQL queries in transit over the network

Question 2

What does HTTPS provide that HTTP does not?

Accepted Answer

Encrypted communication using TLS, ensuring confidentiality and integrity

Answer

Faster data transfer speeds

Answer

Stateful connections between client and server

Answer

Compression of transmitted data

Question 3

What is a firewall in network security?

Accepted Answer

A network security device or software that monitors and controls incoming and outgoing traffic based on defined rules

Answer

Software that detects and removes viruses from a computer

Answer

An encryption tool for securing data at rest

Answer

A tool for scanning network vulnerabilities

Question 4

Which attack involves overwhelming a server with traffic to make it unavailable to legitimate users?

Accepted Answer

Denial-of-Service (DoS) attack

Answer

Man-in-the-Middle attack

Answer

Phishing attack

Answer

Cross-Site Scripting (XSS)

Question 5

What is Cross-Site Scripting (XSS)?

Accepted Answer

A vulnerability where an attacker injects malicious scripts into web pages viewed by other users

Answer

An attack that redirects users from one website to a malicious clone

Answer

A technique for bypassing SSL certificate validation

Answer

A method for stealing HTTP session cookies via network sniffing

Question 6

What is the purpose of a VPN (Virtual Private Network)?

Accepted Answer

To create an encrypted tunnel over a public network, enabling secure private communication

Answer

To accelerate internet browsing by caching web pages

Answer

To assign static IP addresses to network devices

Answer

To provide wireless network access in public areas