Which of the following is an example of session layer vulnerability?(a) weak or non-existent mechanisms for authentication(b) overloading of transport-layer mechanisms(c) poor handling of unexpected input(d) highly complex application security controlsThe question was posed to me in a job interview.This intriguing question comes from Network Models topic in division Understanding Network Models for Security of Cyber Security

Which of the following is an example of session layer vulnerability?(a

1.	Which of the following is an example of session layer vulnerability?(a) weak or non-existent mechanisms for authentication(b) overloading of transport-layer mechanisms(c) poor handling of unexpected input(d) highly complex application security controlsThe question was posed to me in a job interview.This intriguing question comes from Network Models topic in division Understanding Network Models for Security of Cyber Security
Answer» Right choice is (a) weak or non-existent mechanisms for AUTHENTICATION For explanation: Weak or non-existent mechanisms for authentication is an example of session layer vulnerability. Other EXAMPLES are SPOOFING and the HIJACKING of data based on failed-authentication attempts & passing of session-credentials allowing intercept and unauthorized USE.

Discussion

No Comment Found

Related InterviewSolutions

Which of the protocol is not used in the network layer of the TCP/IP model?(a) ICMP(b) IP(c) IGMP(d) HTTPThe question was asked in an interview.This intriguing question comes from Network Models topic in section Understanding Network Models for Security of Cyber Security
____________ protocol attack is done in the data-link layer.(a) HTTP(b) DNS(c) TCP/IP(d) POPI got this question in an internship interview.This intriguing question originated from Network Models in portion Understanding Network Models for Security of Cyber Security
Which 2 protocols are used in the Transport layer of the TCP/IP model?(a) UDP and HTTP(b) TCP and UDP(c) HTTP and TCP(d) ICMP and HTTPI got this question during an interview.This intriguing question comes from Network Models in portion Understanding Network Models for Security of Cyber Security
___________ is an attack technique where numerous SYN packets are spoofed with a bogus source address which is then sent to an inundated server.(a) SYN flooding attack(b) ACK flooding attack(c) SYN & ACK flooding attack(d) Packet flooding attackI have been asked this question in class test.The origin of the question is Network Models topic in chapter Understanding Network Models for Security of Cyber Security
Which of them is not an attack done in the network layer of the TCP/IP model?(a) MITM attack(b) DoS attack(c) Spoofing attack(d) Shoulder surfingI got this question in an international level competition.This intriguing question originated from Network Models in section Understanding Network Models for Security of Cyber Security
Which of them is not an appropriate method of router security?(a) Unused ports should be blocked(b) Unused interfaces and services should be disabled(c) Routing protocol needs to be programmed by security experts(d) Packet filtering needs to be enabledThis question was posed to me during an internship interview.Asked question is from Network Models topic in section Understanding Network Models for Security of Cyber Security
____________ is an attack where the attacker is able to guess together with the sequence number of an in progress communication session & the port number.(a) TCP Spoofing(b) TCP Blind Spoofing(c) IP Spoofing(d) IP Blind SpoofingI got this question during an online exam.My doubt stems from Network Models topic in division Understanding Network Models for Security of Cyber Security
There are __________ different versions of IP popularly used.(a) 2(b) 3(c) 4(d) 5I have been asked this question during a job interview.The query is from Network Models in portion Understanding Network Models for Security of Cyber Security
RoBOT is abbreviated as ___________(a) Return of Bleichenbacher’s Oracle Team(b) Rise of Bleichenbacher’s Oracle Threat(c) Return of Bleichenbacher’s Operational Threat(d) Return of Bleichenbacher’s Oracle ThreatI have been asked this question by my school teacher while I was bunking the class.Enquiry is from Network Models topic in chapter Understanding Network Models for Security of Cyber Security
TLS vulnerability is also known as Return of Bleichenbacher’s Oracle Threat.(a) True(b) FalseThe question was asked in quiz.This key question is from Network Models in chapter Understanding Network Models for Security of Cyber Security

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment