Home
Recent Q&A
Java
Cloud
JavaScript
Python
SQL
PHP
HTML
C++
Data Science
DBMS
Devops
Hadoop
Machine Learning
Azure
Blockchain
Devops
Ask a Question
OWASP Top 10 Vulnerabilities Interview Questions and Answers
Home
Questions
OWASP Top 10 Vulnerabilities
0
votes
Client-side scripts can be allowed to execute in the browsers for needed operations.
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
client-side-script
0
votes
Which attack can execute scripts in the user’s browser and is capable of hijacking user sessions, defacing websites or redirecting the user to malicious sites?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
script-execution
0
votes
Which of the following are most likely to result in insecure cryptography?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
insecure-cryptography
0
votes
What is an attack that exploits the trust a site has in a user’s browser?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
user-browser
0
votes
Role-based access control helps prevent which OWASP Top 10 vulnerability?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
owasp
access-control
0
votes
What happens when an application takes user inputted data and sends it to a web browser, without proper validation?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
input-data
web
browser
0
votes
What is an attack that forces a user’s session credential or session ID to an explicit value?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
session-id
user-credential
0
votes
Which of the following languages are the primary targets of cross-site scripting?
answered
Feb 13, 2022
in
OWASP Top 10 Vulnerabilities
by
SakshiSharma
cross-site-scripting
0
votes
What is an example of a session-related vulnerability?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which threat can be prevented by having unique usernames generated with a high degree of entropy?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
For a connection that changes from HTTP to HTTPS, what flaw arises if you do not change the session identifier?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What threat arises from not flagging HTTP cookies with tokens, as secure?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What attack can be prevented by links or forms that invoke state-changing functions with an unpredictable token for each user?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which of the following actions should you take to verify the implementation of a web application?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which of the following are the best ways to implement transport layer protection?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
In which of the following scenarios should you use the escaping technique?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What happens when an application takes user inputted data, and sends it to a web browser without proper validation and escaping?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which of the following depict the typical impact of failure to restrict URL access?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What is the attack technique used to exploit websites by altering the backend database queries through inputting manipulated queries?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What flaw arises from session tokens having poor randomness across a range of values?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which of the following consequences are most likely to occur due to an injection attack?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
Which of the following are the best ways to protect against injection attacks?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
0
votes
What type of flaw occurs when untrusted user-entered data is sent to the interpreter as part of a query or command?
answered
Feb 12, 2022
in
OWASP Top 10 Vulnerabilities
by
DavidAnderson
owasp-top-10-vulnerabilities-interview-questions-answer
Help get things started by
asking a question
.
...