18 Questions
Why is input validation important in web applications?
To reduce the attack surface
What is the primary purpose of access control?
To regulate access to protected resources
What is the difference between authentication and authorization?
Authentication proves identity, authorization grants access
What is the purpose of authentication factors in access control?
To prove user identity
What happens if an application doesn't perform proper authentication?
Anyone can impersonate a user
What are the two related processes in access control?
Authentication and Authorization
When should authentication be performed according to the rule?
Every time a request is made to access a protected resource
What is a recommended measure against online password attacks in securing web authentication mechanisms?
Allowing account lockout after a certain number of failed attempts
What is a potential issue with allowing account lockout after a certain number of failed attempts?
It may cause flooding of customer support with requests to unlock accounts
What is an alternative solution to allowing account lockout?
Implementing CAPTCHA to work against brute-force attacks
Why should credentials not be hard-coded?
They can be easily extracted with little effort
What is a recommended approach to managing credentials?
Using a keys or credential management system
What is the purpose of rotating passwords?
To reduce the risk of password compromise
What is the purpose of validating a Session ID in every request?
To prevent session hijacking
Why is it important to disable accounts?
To prevent unauthorized access
What is the purpose of requiring password uniqueness?
To prevent password reuse
What is the role of authentication in access control?
To plays a fundamental role
What is the purpose of storing passwords securely?
To protect passwords from unauthorized access
Summary of web application security practices, including input validation, attack surface reduction, and access control mechanisms.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
