Quiz - Module 6: Firewall & Web
Test your knowledge on firewall and web security!
Question 1
What is an SQL injection?
- A) A virus
- B) An attack inserting malicious SQL code into a query
- C) A network protocol
- D) A type of database
See the answer
Answer: B) An attack inserting malicious SQL code
SQL injection exploits input validation flaws.
Question 2
What does XSS stand for?
- A) eXtra Secure System
- B) Cross-Site Scripting
- C) XML Security Standard
- D) eXtended System Service
See the answer
Answer: B) Cross-Site Scripting
XSS injects malicious JavaScript code into web pages.
Question 3
What is the purpose of an XSS attack?
- A) Steal cookies/sessions or execute code in the browser
- B) Format the hard drive
- C) Encrypt files
- D) Scan ports
See the answer
Answer: A) Steal cookies/sessions or execute code
XSS can steal sessions, redirect, or modify content.
Question 4
How to protect against SQL injection?
- A) Use prepared/parameterized queries
- B) Use an antivirus
- C) Disable the Internet
- D) Change browser
See the answer
Answer: A) Use prepared/parameterized queries
Parameterized queries separate code and data.
Question 5
What is session hijacking?
- A) A virus
- B) Stealing the session ID to impersonate a user
- C) A port scan
- D) A type of encryption
See the answer
Answer: B) Stealing the session ID to impersonate a user
The attacker steals the session cookie to impersonate the victim.
Question 6
What is a cookie?
- A) A virus
- B) A small file stored by the browser to retain information
- C) A network protocol
- D) A type of server
See the answer
Answer: B) A small file stored by the browser
Cookies retain sessions, preferences, etc.
Question 7
Which tool allows network traffic analysis?
- A) Notepad
- B) Wireshark
- C) Paint
- D) Calculator
See the answer
Answer: B) Wireshark
Wireshark captures and analyzes network packets.
Question 8
What does HTTPS provide over HTTP?
- A) More speed
- B) TLS/SSL encryption of communications
- C) More colors
- D) Less security
See the answer
Answer: B) TLS/SSL encryption of communications
HTTPS protects data in transit from interception.
Question 9
What is a Man-in-the-Middle (MITM) attack?
- A) A port scan
- B) An interception of traffic between two parties
- C) An email virus
- D) A type of firewall
See the answer
Answer: B) An interception of traffic between two parties
The attacker positions themselves between the victim and the server to spy/modify.
Question 10
Which port must be open for an HTTP web server?
- A) 22
- B) 80
- C) 443
- D) 21
See the answer
Answer: B) 80
HTTP uses port 80 by default.
Question 11
What is an outbound firewall rule?
- A) A virus
- B) A rule controlling traffic leaving the machine
- C) An inbound rule
- D) A protocol
See the answer
Answer: B) A rule controlling traffic leaving the machine
Outbound rules filter what the machine can send.
Question 12
What does block by default mean?
- A) Allow all traffic
- B) Block everything except what is explicitly allowed
- C) Disable the firewall
- D) Block only viruses
See the answer
Answer: B) Block everything except what is explicitly allowed
This is the "deny by default" security principle.
Question 13
What is a proxy?
- A) A virus
- B) An intermediary between the client and the server
- C) A type of RAM
- D) A file format
See the answer
Answer: B) An intermediary between the client and the server
The proxy can filter, cache, or anonymize connections.
Question 14
What is a reverse proxy?
- A) A reverse proxy that protects servers
- B) A virus
- C) A browser
- D) An email protocol
See the answer
Answer: A) A reverse proxy that protects servers
The reverse proxy receives requests and redistributes them to servers.
Question 15
What is phishing?
- A) A sport
- B) A fraud technique by email/site imitating a legitimate entity
- C) A network protocol
- D) A type of firewall
See the answer
Answer: B) A fraud technique by imitation
Phishing deceives victims to steal their credentials.
Question 16
What is CSRF?
- A) A protocol
- B) Cross-Site Request Forgery - forcing unwanted actions
- C) A virus
- D) A browser
See the answer
Answer: B) Cross-Site Request Forgery
CSRF forces an authenticated user to perform actions unknowingly.
Question 17
How to protect against XSS?
- A) Validate and escape inputs/outputs
- B) Disable JavaScript
- C) Use HTTP instead of HTTPS
- D) Delete cookies
See the answer
Answer: A) Validate and escape inputs/outputs
HTML escaping prevents execution of injected scripts.
Question 18
What is an SSL/TLS certificate?
- A) A virus
- B) A digital document proving a site's identity
- C) A type of password
- D) A file format
See the answer
Answer: B) A digital document proving a site's identity
The certificate enables HTTPS encryption and authenticates the server.
Question 19
What does the browser check with a certificate?
- A) The site's speed
- B) The validity, issuer, and domain of the certificate
- C) The site's design
- D) The number of visitors
See the answer
Answer: B) The validity, issuer, and domain
The browser checks that the certificate is valid and matches the site.
Question 20
What is port forwarding?
- A) A virus
- B) Redirecting an external port to an internal machine
- C) A browser
- D) An email protocol
See the answer
Answer: B) Redirecting an external port to an internal machine
Port forwarding allows access to internal services from the Internet.
Question 21
What is a DMZ?
- A) A virus
- B) Demilitarized Zone - semi-exposed network segment
- C) A protocol
- D) A type of RAM
See the answer
Answer: B) Demilitarized Zone
The DMZ hosts servers accessible from the Internet, isolated from the LAN.
Question 22
What is a honeypot?
- A) A virus
- B) A decoy system to attract and study attackers
- C) A browser
- D) A protocol
See the answer
Answer: B) A decoy system to attract attackers
Honeypots allow analysis of attack techniques.
Question 23
What is application filtering?
- A) A virus
- B) A firewall that filters based on the application, not just the port
- C) A browser
- D) A protocol
See the answer
Answer: B) A firewall filtering based on the application
Application filtering inspects content, not just ports.
Question 24
What is an IDS?
- A) A virus
- B) Intrusion Detection System - detects intrusions
- C) A browser
- D) A protocol
See the answer
Answer: B) Intrusion Detection System
The IDS monitors and alerts on suspicious activity.
Question 25
What is an IPS?
- A) A virus
- B) Intrusion Prevention System - detects and blocks intrusions
- C) A browser
- D) A protocol
See the answer
Answer: B) Intrusion Prevention System
The IPS can automatically block detected attacks.
Question 26
What is the difference between IDS and IPS?
- A) No difference
- B) IDS only detects, IPS detects AND blocks
- C) IPS is older
- D) IDS is more secure
See the answer
Answer: B) IDS only detects, IPS detects AND blocks
The IDS is passive, the IPS is active.
Question 27
What is a WAF?
- A) A virus
- B) Web Application Firewall - firewall for web applications
- C) A browser
- D) A protocol
See the answer
Answer: B) Web Application Firewall
The WAF specifically protects web applications (SQL injection, XSS...).
Question 28
What is rate limiting?
- A) A virus
- B) Limiting the number of requests per period
- C) A browser
- D) A protocol
See the answer
Answer: B) Limiting the number of requests per period
Rate limiting protects against brute force and DDoS attacks.
Question 29
What is a DDoS attack?
- A) An email virus
- B) Distributed Denial of Service - saturation by massive traffic
- C) A secure protocol
- D) A type of encryption
See the answer
Answer: B) Distributed Denial of Service
DDoS overwhelms a service with traffic to make it unavailable.
Question 30
What is the best practice for passwords?
- A) Use the same one everywhere
- B) Use unique, long, and complex passwords
- C) Write them on a post-it
- D) Use your name
See the answer
Answer: B) Use unique, long, and complex passwords
A password manager helps manage strong passwords.
Score
| Score | Level |
|---|---|
| 27-30 | Excellent! |
| 22-26 | Very good! |
| 17-21 | Good |
| 12-16 | Fair |
| 0-11 | Needs review |
Module 6 Quiz - Firewall & Web - 30 questions