Eccouncil 312-50 Quiz 3 Topic 9 Questions 11-15

Question: 1

Which of the following is an adaptive SQL Injection testing technique used to discover coding errors by inputting massive amounts of random data and observing the changes in the output?

AFunction Testing

BDynamic Testing

CStatic Testing

DFuzzing Testing

Show Answer

Question: 2

Which type of scan measures a person's external features through a digital video camera?

AIris scan

BRetinal scan

CFacial recognition scan

DSignature kinetics scan

Show Answer

Question: 3

These hackers have limited or no training and know how to use only basic techniques or tools.

What kind of hackers are we talking about?

ABlack-Hat Hackers A

BScript Kiddies

CWhite-Hat Hackers

DGray-Hat Hacker

Show Answer

Question: 4

Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?

AValidate and escape all information sent to a server

BUse security policies and procedures to define and implement proper security settings

CVerify access right before allowing access to protected information and UI controls

DUse digital certificates to authenticate a server prior to sending data

Show Answer

Question: 5

In Risk Management, how is the term "likelihood" related to the concept of "threat?"

ALikelihood is the probability that a threat-source will exploit a vulnerability.

BLikelihood is a possible threat-source that may exploit a vulnerability.

CLikelihood is the likely source of a threat that could exploit a vulnerability.

DLikelihood is the probability that a vulnerability is a threat-source.

Show Answer

Eccouncil 312-50 Quiz:3 Topic:9 Questions:11-15