Save
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

mod 7 , datasys+ sql

QuestionAnswer
What is parameter pollution and how does it work? Is a web attack that sends multiple values for the same input variables. It exploits defects in web platforms that don't handle duplicate parameters properly, Attackers use it to bypass input validation by creating inconsistencies between how different a
How does parameter pollution differ from SQL injection? manipulates application logic by sendingg sending duplicate parameters with different values, exploiting inconsistent parameter handling. SQL injection sends commands through a web server to backend systems,
What are the two main types of parameter pollution attacks? 1. Query String Pollution (QSP): Affects parameters in the URL 2. HTTP Post Pollution (HPP): Affects parameters in the request body
What is a web application firewall and where is it positioned? A WAF sits in front of the web server, scrutinizing incoming traffic for malicious input before allowing it to reach the application. It filters requests based on predefined rules parameter pollution.
What are the three common deployment models for Web application firewalls Network-Based: Placed at network perimeter to protect all applications Host-Based: Applied directly to the web server for application-specific protection Cloud-Based: Distributed protection that scales automatically with traffic volume
What is SQL injection and why is it dangerous? SQL injection occurs when an attacker sends commands through a web server to a backend system, bypassing normal security controls. This can lead or complete system compromise.
What is blind SQL injection and what are its variants? Two main variants: Blind content-based: Attacker observes changes in returned content to infer success Blind timing-based: Attacker measures response times to determine if injection succeeded
List at least five physical security measures for protecting database infrastructure. 1.Industrial camouflage 2. Fences and lighting 3. Badge access systems 4. Biometric authentication 5. Access control vestibules 6. Fire suppression systems 7. Cooling and humidity control 8. Surveillance cameras and guards
How should networks be divided for optimal database security? 1. External zone (untrusted) 2. Demilitarized zone (DMZ) for public-facing services 3. Internal network (trusted) for sensitive systems and databases
What are the two modes of port security for network switches? 1. Static mode: Limits access to pre-defined MAC addresses 2. Dynamic or "sticky" mode: Learns and remembers authorized devices automatically
Created by: ali_878
Popular Miscellaneous sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards