CSS Quiz 8 AKTU Prutor

 Q:1. Password should be combination of ____. (according to the video lecture).

1.Lower case letters only

2.Memorable names and dates

3.Upper case and lower-case letters, numbers and non letter characters

4. ->Upper case and lower-case letters, numbers and symbols

Reason: The key aspects of a strong password are length (the longer the better); a mix of letters (upper and lower case), numbers, and symbols, no ties to your personal information, and no dictionary words

Q:2. The cookies we use, are sent with ______, which in general, _____ the performance.

1.only when requested,improves

2. ->every request, degrades

3.extra information, is useless for

4.None of the mentioned

Reason : typically cookies are used for a variety of purposes: ... Cookies impact performance because every time you make a request to a ... an HTML file, a CSS file, an image) the browser will send the cookie in the request to the server. ... request becomes a little bigger and thus performance begins to degrade.

Q:3. Which of the following header is used to create cookie ?

1.Create-Cookie

2.Init-Cookie

3. ->Set-Cookie

4.Start-Cookie

Reason: After receiving an HTTP request, a server can send one or more Set-Cookie headers with the response. The cookie is usually stored by the browser, and then the cookie is sent with requests made to the same server inside a Cookie HTTP header.

Q:4. _______ is an attack to inject code, in which malicious SQL code is passed to an instance of SQL Server from ______.

1. ->SQL injection, user input field

2.code injection, another server

3.both 1 and 2

4.None of the above.

Reason: SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker.

Q:5. How to prevent SQL injection ?

1.Use parameterized / prepared SQL

2.use string concatenated query

3. ->Both A and B

4.None of the above

Reason: The best way to prevent SQL Injections is to use safe programming functions that make SQL Injections impossible: parameterized queries (prepared statements) and stored procedures. Every major programming language currently has such safe functions and every developer should only use such safe functions to work with the database.