Online Access Free CAP Practice Test

Which of the following hashing algorithms is considered to be the most secure amongst these?

• A.MD5
• B.Bcrypt
• C.SHA-1
• D.SHA-0

After purchasing an item on an e-commerce website, a user can view their order details by visiting the URL:
https://example.com/?order_id=53870
A security researcher pointed out that by manipulating the order_id value in the URL, a user can view arbitrary orders and sensitive information associated with that order_id. This attack is known as:

• A.Server-Side Request Forgery
• B.Session Poisoning
• C.Session Riding OR Cross-Site Request Forgery
• D.Insecure Direct Object Reference

In the context of the Race Condition vulnerability, which of the following statements is true?

• A.A situation that occurs when a single thread unpredictably accesses two resources.
• B.A situation that occurs when two threads access the same resource at the same time.
• C.A situation that occurs when two threads access different resources at the same time.
• D.A situation that occurs when a single thread predictably accesses two resources.

Your application is hosting JavaScript from a third-party website as shown in the snippet below.
<script src="https://[//cdn.thirdparty-example.com/](example.js)" integrity="sha384-Fmb0CYeA6gM2uLuyvqs7x75u0mktDh2nKLomp3PHkJ0b5vJF2qF6Gbrc/6dK" crossorigin="anonymous"></script> Which of the following is true regarding the code snippet?

• A.The code snippet will perform validations for Cross-Site Request Forgery attacks
• B.The code snippet will perform validations for Outdated Javascript checks
• C.The code snippet will perform Subresource Integrity (SRI) checks
• D.The code snippet will perform validations for Cross-Site Scripting attacks

Which of the following security attributes ensures that the browser only sends the cookie over a TLS (encrypted) channel?

• A.No_XSS
• B.Secure
• C.None of the above
• D.HttpOnly