QUESTION: 5

You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities:

<script>alert("This is a test.")</script>

When you type this and click on search, you receive a pop-up window that says:

"This is a test."

What is the result of this test?

Your website is vulnerable to CSS
Your website is not vulnerable
Your website is vulnerable to SQL injection
Your website is vulnerable to web bugs

Answer(s): A

Reveal Solution Next Question

QUESTION: 6

If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?

The zombie will not send a response
31402
31399
31401

Answer(s): D

Reveal Solution Next Question

QUESTION: 7

Michael works for Kimball Construction Company as senior security analyst, As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

Closed
Open
Stealth
Filtered

Answer(s): B

Reveal Solution Next Question

QUESTION: 8

You are assisting a Department of Defense contract company to become compliant with the stringent security policies set by the DoD. One such strict rule is that firewalls must only allow incoming connections that were first initiated by internal computers.
What type of firewall must you implement to abide by this policy?

Packet filtering firewall
Circuit-level proxy firewall
Application-level proxy firewall
Statefull firewall

Answer(s): D

Reveal Solution Next Question

Free EC0-479 Exam Braindumps (page: 2)

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8