Fundamentals of InfoSecintermediate
Match each web attack with its characteristic behavior.
Answer
SQL injection - Input changes the meaning of a database command, Cross-site scripting (XSS) - Attacker-controlled content is inserted into a page received by a client, Cross-site request forgery (CSRF) - A logged-in user's browser is tricked into sending an unwanted request, Parameter manipulation - A user-controlled request value is changed to alter application behavior
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| SQL injection | Input changes the meaning of a database command | Unsafe input becomes part of SQL rather than remaining a value. |
| Cross-site scripting (XSS) | Attacker-controlled content is inserted into a page received by a client | The browser receives untrusted content that may execute or affect the page. |
| Cross-site request forgery (CSRF) | A logged-in user's browser is tricked into sending an unwanted request | The attack relies on the user's existing authenticated browser session. |
| Parameter manipulation | A user-controlled request value is changed to alter application behavior | The application wrongly trusts a request value the user can edit. |
### Terms
- **SQL**: Structured Query Language, used to communicate with relational databases.
- **XSS**: Cross-site scripting, an attack that injects content into a page delivered to a client.
- **CSRF**: Cross-site request forgery, an attack that induces an authenticated browser to make an unwanted request.
### Remember
Database commands, page content, authenticated requests, and request values point to different attack classes.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free