Incentro Cyber Security 26-01-2022

• quiz
• Basisschool
• Groep 1

Spoofing a WiFi Access point is also called?

1. An evil twin attack
2. Pineapple attack
3. A keystroke Injection
4. Nmap scan Attack

HTTPS is helpful for?

1. For preventing CSRF attacks
2. For preventing XSS attacks
3. For preventing SQL injections
4. For preventing Sniffing attacks

Which statement is true?

1. REST APIs should deny access by default, except public resources
2. JWT tokens can manually be invalidated
3. The following header is valid, “Access-Control-Alllow-origin: https://*.website.com”
4. Limit the rate of API access does not minimize the harm from automated attack tooling

To prevent an CSRF attack, an web application should?

1. Make sure that POST, PUT, PATCH & DELETE calls are idempotent
2. Transmit the CSRF token by only using cookies
3. Generate the CSRF token on the service-side and require a custom-HTTP-header per request
4. Only permit HTTPS requests

The best way to store passwords is by

1. Make sure that POST, PUT, PATCH & DELETE calls are idempotent
2. Transmit the CSRF token by only using cookies
3. Generate the CSRF token on the service-side and require a custom-HTTP-header per request
4. Only permit HTTPS requests

Which statement is true?

1. By using the AES-256 encryption.
2. By using the slow Argon2id hashing.
3. By using base64 encoding.
4. By using the fast SHA-1 hashing.

Which statement is true :)?

1. To analyse vulnerabilities in the node modules you can use npm audit.
2. Always specify a USER when creating Docker files
3. To analyse vulnerabilities in for the maven dependencies you can use the owasp dependency check maven
4. All of the above :)

CIA in IT Security means what?

1. Central Intelligence Agency
2. Confidentiality, Integrity and Availability
3. Continuity, Integrity and Accessibility
4. Continuity, Integration and Availability

What is 'Alpine'?

1. Adventurous form of skiing
2. Open Source Security Tool by Google
3. Linux distribution
4. City in Wyoming, USA

Which of the following is the most secure password option?

1. x509 certificate
2. Welkom2007
3. t:u7?3H%>-3tH(e3SksNr.b#
4. pointed-silica-womb-garden

Within how much time after public disclosure did GCP Cloud Armor provide protection against Log4J2?

1. Direct at public disclosure
2. Within 24 hours
3. Within 7 days
4. Still no protection