Question: lab 5 1. Why is it critical to perform a penetration test on a web application and a web server prior to production implementation? 2.

lab 5

1. Why is it critical to perform a penetration test on a web application and a web server prior to production implementation?

2. What is a cross-site scripting attack? Explain in your own words.

3. What is a reflective cross-site scripting attack?

4. Based on the tests you performed in this lab, which web application attack is more likely to extract privacy data elements out of a database?

5. If you can monitor when SQL injections are performed on an SQL database, what would you recommend as a security countermeasure to monitor your production SQL databases?

6. Given that Apache and Internet Information Services (IIS) are the two most popular web application servers for Linux and Microsoft Windows platforms, what would you do to identify known software vulnerabilities and exploits?

7. What can you do to ensure that your organization incorporates penetration testing and web application testing as part of its implementation procedures?

8. What is the purpose of setting the DVWA security level to low before beginning the remaining lab steps?

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock blur-text-image

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!

7.6. Problem 6.4 introduces data on coal-mining disasters from 1851 to 1962. For these data, assume the model Xj Poisson(1), j = 1, . . . , , Poisson(2), j = + 1,..., 112. (7.28) Assume i| ...

Why is it critical to perform a penetration test on a web application and a web server prior to production implementation

Project: Advanced Inventory Management System Upgrade for ABC Biopharmaceuticals Ltd. Project Duration: 12-18 months Budget: $1 million (fixed) Project Description: ABC Biopharmaceuticals Ltd....

1. Which of the following principles describes how a security analyst should communicate during an incident? A. The communication should be limited to trusted parties only. B. The communication...

1. The business has been informed of a suspected breach of customer data. The internal audit team, in conjunction with the legal department, has begun working with the cybersecurity team to validate...

There are two problems due this week (each worth 35 points) as follows. Case 5-1David L. Miller: Portrait of a White-Collar Criminal (page 144). In comprehensive paragraphs, answerrequirements 1?6....

each case is required to answer each question it is asking. so for case 1 we have 5 questions, case 2 the same 5 questions and case 3 samething. The document below is the SOW attachment needed....

Capstone Project Guidelines Updated August 30, 2021 Introduction The capstone project is a structured walkthrough penetration test of a fictional company, Artemis, Incorporated (Artemis). A...

The ciestone fropect it a "atmuctated maletirough" peietration ben of a fietionsl company, Acteris, incorpecated ('Artemin) A tructured wakihrough in an ocpinined proceduse for a group of peets ts...

Capstone Project Guidelines Updated August 30, 2021 Introduction The capstone project is a structured walkthrough penetration test of a fictional company, Artemis, Incorporated (Artemis). A...

For each of the following statements, decide whether it is true or false, and explain your answer in at most two sentences using the material you learned in the course. No points will be given...

A total of 80 (36 male) participants were recruited at the University of Canterbury (51 participants) and from the general population (29 participants). Participants from the general public were...

Evaluate the definite integral exactly. 1 4 . 5 7 x - 1 d x

44. Which of the following factors influences demand? I. consumer income II. prices of complement goods III. prices of substitute goods IV. the number of consumers O Il and II I and IV O I, II, III,...

4. Consider the function 1 f(z) = IE (-2,0] 2x +3 Divide the domain into 9 evenly spaced points and determine at each point (where possible): (a) The first derivative using forward differences (b)...

Harley Gym Inc. is a C corporation that has the following activity in the current year. What is taxable income, what is current E&P. Gross receipts $700,000 Dividends received on stock in Spanx...

------------------------------------- At the beginning of its first year of operations, Bonita Limited has 4,900, $3 preferred shares and 48,000 common shares. Using the format shown below, allocate...

Ensure continued excellence in people management.

Enhance the international team by recruiting the best people.

Optimize the organization and its resources both locally and internationally.