Search Interview Questions | Click here and help us by providing the answer. Click Correct / Improve and please let us know. |
|
|||
|
| ||||
| Security - Interview Questions and Answers for 'Symantec' - 6 question(s) found - Order By Newest | ||||
| ||||
| Ans. Encrypted User Name / Password Encrypted Password within Cookie Encrypted Tokens IP Client Certificates Oauth | ||||
| ||||
| Ans. Yes, Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated. | ||||
| ||||
| ||||
| Ans. XSS or cross site scripting is a javascript vulnerability in web applications. The easiest way to explain this is with a case when the user enters a script in the client side input fields and that input gets processed without getting validated. This leads to untrusted data getting saved and executed on the client side. | ||||
| ||||
| Ans. The counter measures of XSS are input validation and implementing a CSP (Content Security Policy). | ||||
| ||||
| Ans. By properly encoding data while persisting as well as retrieval. | ||||