Internet security-information systems security and assurance

Is like to double check answers , and I do trust the system and changes my answer and each one has been correct . Deeply appreciated

180 PART 2 I Secure Web-Enabled Application Deployment and Social Networking CHAPTER 6 ASSESSMENT delete, and modify information held within a database and even take control of the server on which the database is operating? 7. Which attack allows the attacker to access 1. One way to verify if a system is attacked by a brute-force attack is to periodically check the log files. A. True B. False 8. Which of the following are actual XMI-related attacks? (Select two.) A. XML attribute blowup B. XML internal entities CXML entity expression D. XML injection 2. Content spoofing tactics often include which of the following? A. Spam e-mail links B. Forum links C. Chatroom links D. A and Conly E. All of the above 9. Which of the following are Web site weaknesses discussed in this chapter? (Select three.) A. OS commanding B. Improper file system permissions C. Insufficlent authentication D. Fingerprinting E. Server misconfiguration 3. How do XSS attacks differ from CSRF attacks? 4. Which of the following attacks involve the use of CR and LF characters? (Select two.) A. HTTP request smuggling B. HTTP response smuggling C. HTTP request splitting D. HTTP response splitting 10. Applications hardening is the process of securing applications in use on a network. A. True B. False 5. A common path traversal attack uses which syntax sequence to attempt to locate restricted areas on a server? 11. To avoid improper input handling, which approaches can you use when handling user input? (Select three.) A. Stripping B. Sanitization C. Rejecting known bad input D. Accepting only known good input B. C. CR D. LF 6. During a session fixation attack, in which ways attacker obtain a valid session identither? 12. Which of the following is a strategy for reducing (Select three.) A. Prediction B. Capture C. Fixation D. Spoofing the risk of data leakage? A. Sanitization B. Strong firewall controls C. Authorization D. Encryption