Security+ Element K Chapter 6

Front 1

Define DEP.

Back 1

On Windows, is known as the Data Execution Prevention bit. A.K.A. No execute bit, or eXecute Disable (XD) bit. If enabled, the system believes the data in a particular region of memory to be non-executable.

Front 2

Define ActiveX.

Back 2

A MS programming technology that enables programmers to insert dynamic components such as animations, forms, reports or data access pages, counters, or even a full-fledged software application to a web page or application. Intended for Windows only.

Front 3

Define ActiveX controls.

Back 3

Programs that can be loaded over the internet in IE on Windows. These programs gain significantly more access to the local system than a normal browser plug-in, including all rights of the active user account. Only usable on IE without the help of a plug-in.

Front 4

Which type of Java Applet runs in a "sand box" by default.

Back 4

Unsigned applets run in their own protected area in memory.

Front 5

What is the main standard followed by scripting languages on the web?

Back 5

ECMAScript

Front 6

List three client-side scripting languages.

Back 6

JavaScript (Netscape), Actionscript (Adobe Flash), and VBScript (Microsoft, Visual Basic).

Front 7

Define AJAX.

Back 7

A combination of JavaScript and XML. Also uses DOM, CSS, and XHTML technologies. Used for creating web pages and applications that are capable of interacting and responding quickly to user requests without reloading the entire web page every time a request is made to the server.

Front 8

Define JSP.

Back 8

Java Server Pages. A server-side scripting language. Java-based. Allows Java programming language commands to be included in a web page.

Front 9

Define ASP.

Back 9

Active Server Pages. A server-side scripting language. Microsoft's alternative to JSP.

Front 10

Define ColdFusion.

Back 10

A server-side scripting language. Tag-based, can interact with databases, manage sessions, set cookies, and provide dynamic web page functionality.

Front 11

Define PERL.

Back 11

Practical Extraction and Report Language. A server-side scripting language. Open source.

Front 12

Define PHP.

Back 12

Hypertext Preprocessor. A server-side scripting language. Open source.

Front 13

Define XSS.

Back 13

Cross-site scripting attack. Takes advantage of scripting and input validations to attack legitimate users in either a stored attack or a reflected attack (code is injected to the server, the server attacks the clients.)

Front 14

Define cookie snarfing.

Back 14

If a cookie is stolen during transmission it can later be used in a replay attack to gain unauthorized access to a website.

Front 15

Define the cookie header "HTTP-only".

Back 15

The cookie should only be accessible via an HTTP connection, and is not visible to client-side technologies such as Flash or JavaScript, even if they originate from the server that set the cookie.

Front 16

Define the cookie flag "secure".

Back 16

Instructs the client software that the cookie in question should only be transmitted via unspecified "secure" means, and not over an unsecured HTTP connection.

Front 17

Define ad filtering.

Back 17

Services that block advertisements within a web page.

Front 18

Define phishing filter.

Back 18

A feature that attempts to identify and block websites and links that are not what they claim to be.

Front 19

Define a pop-under ad.

Back 19

Opens a pop-up window behind the original so that the user can finish what they were doing before noticing it. Increases chances of success for the advertiser.