20. Which of the following description is not true? A. tuning off the folder name display function can prevent web server information unauthorized disclosure. B. the passwords that users select can be the source of a threat to web server. C. a Trojan horse can remove access controls within a database, giving all users complete access to the data including intruders. D. buffer overflow can cause a threat to web server, no software and hardware can reduce the potential damage from buffer overflows.

choose the correct answer

QUESTION 4 Which of the following terms is a collection of computers and users that are identified by a common security database?   a. A segment   b. A domain   c. A controller   d. A workgroup

Based upon your readings this week, explain what each of the following terms mean and how they can be prevented.  This will aid you in preparing for the quiz on this material.  Topics: Buffer Overflow Injections (SQL, HTML, Command, Code) Authentication Credential brute force Session hijacking Redirect Default credentials Weak credentials Kerberos exploits Authorization Parameter pollution Insecure direct object reference Cross-site scripting (XSS) Stored/persistent Reflected DOM Cross-site request forgery (CSRF/XSRF) Clickjacking Security misconfiguration Directory traversal Cookie manipulationLinks to an external site. File inclusion Local Remote Unsecure code practices Comments in source code Lack of error handling Overly verbose error handling Hard-coded credentials Race conditions Unauthorized use of functions/unprotected APIs Hidden elements (sensitive info in the DOM) Lack of code signing