CSRF attacks primarily target which aspect of a web application?
- User Sessions
- Database Structure
- User Credentials
- Cross-Origin Resource Sharing (CORS)
CSRF (Cross-Site Request Forgery) attacks aim to exploit the user's active session, tricking them into performing unintended actions in an authenticated session.
In PDO, named placeholders in prepared statements start with the symbol ________.
- :param
- $param
- ?param
- @param
In PDO, named placeholders in prepared statements start with a colon (:), so they are typically written as :param.
In PHP, the ________ function is used to get the length of a string.
- strlen()
- count()
- sizeof()
- strlength()
In PHP, the strlen() function is used to determine the length (number of characters) of a string. It's particularly useful for validating input or working with text data.
When you want to fetch a single row of results from a PDO statement, you use the ________ method.
- fetch()
- fetchOne()
- fetchRow()
- fetchSingle()
To fetch a single row from a PDO statement, you use the fetch() method. This retrieves the next row of the result set.
A transaction in a database ensures that a series of operations are ________.
- Atomic
- Synchronized
- Rollbacked
- Optimized
A transaction in a database ensures that a series of operations are atomic, meaning they are treated as a single unit of work, and are either all completed or all rolled back in case of an error.
Under GDPR, what is the required action if a company experiences a data breach involving personal data?
- Ignore the breach if it's minor
- Inform affected individuals about the breach
- Notify the relevant supervisory authority within 72 hours
- Share details of the breach on social media
Under GDPR (General Data Protection Regulation), companies must promptly notify the relevant supervisory authority within 72 hours of discovering a data breach involving personal data. This regulation emphasizes transparency and accountability in handling data breaches, ensuring that authorities are informed to take necessary actions to protect individuals' privacy. Understanding GDPR requirements is crucial for data protection compliance.__________________________________________________
What is the main objective of the Computer Fraud and Abuse Act in the United States?
- Criminalizes unauthorized access and computer fraud
- Ensures fair competition in the technology sector
- Protects against cyberbullying and online harassment
- Regulates the export of cryptographic technologies
The Computer Fraud and Abuse Act (CFAA) in the United States aims to criminalize unauthorized access to computer systems and activities related to computer fraud. It provides legal measures to address cybercrimes and unauthorized access, emphasizing the protection of computer systems and data. Understanding the objectives of the CFAA is vital for professionals engaged in legal aspects of cybersecurity and combating computer-related offenses.__________________________________________________
What is the role of a 'honeypot' in network security?
- Deceiving attackers by mimicking a vulnerable system
- Encrypting communication between network devices
- Filtering malicious content from emails
- Monitoring and analyzing network traffic
A honeypot is a security mechanism that involves setting up a decoy system to attract and deceive attackers. The primary role is to divert and detect malicious activities, allowing security professionals to study and understand potential threats. Implementing honeypots enhances network security by providing insights into attack techniques and vulnerabilities, contributing to proactive defense strategies.__________________________________________________
How does rate limiting enhance API security?
- Enhances encryption algorithms and protocols
- Ensures data integrity and confidentiality
- Mitigates the risk of DDoS attacks
- Prevents unauthorized access
Rate limiting controls the number of requests an API can receive within a specified timeframe. This helps prevent abuse, unauthorized access, and DDoS attacks by restricting the rate at which requests are processed. By implementing rate limiting, API security is bolstered, ensuring that resources are protected from excessive requests and potential exploitation.__________________________________________________
An attack that uses previously unknown vulnerabilities in software or hardware is known as a ____________ exploit.
- Buffer overflow
- Cross-site scripting
- SQL injection
- Zero-day
A zero-day exploit targets vulnerabilities unknown to the software or hardware vendor. Cyber attackers exploit these vulnerabilities before developers can create patches or fixes. Understanding zero-day exploits is critical for cybersecurity professionals to stay ahead of potential threats and proactively secure systems against emerging vulnerabilities.__________________________________________________