7. What condition is necessary ona web page for it to be used in a cross-site scripting attack?
(A) Reflected input
(B) Database-driven content
(C) .NET technology
(D) CGI scripts

8. What is the most effective defense against cross-site scripting attacks?(A) Limiting account privileges(B) Input validation(C) User authentication(D) Encryption

9. What worm was the first to cause major physical damage to a facility?(A) Stuxnet(B) Code Red(C) Melissa(D) WannaCry

10. Ben's system was infected by malicious code that modified the operating system to allow the malicious code author to gain access to his files. What type of exploit did this attacker engage in? (A) Escalation of privilege (B) Backdoor (C) Rootkit (D) Buffer overflow

11. What technology does the Java language use to minimize the threat posed by applets?(A) Confidentiality(B) Encryption(C) Stealth(D) Sandbox

12. What HTML tag is often used as part of a cross-site scripting (XSS) attack?(A) ＜H1＞(B) ＜НЕAD＞(C) ＜XSS＞(D) ＜SCRIPT＞

複選題13. When designing firewall rules to prevent IP spoofing, which of the following principles should you follow? (A) Packers with internal source IP addresses don't enter the network from the outside. (B) Packets with internal source IP addresses don't exit the network from the inside. (C) Packets with public IP addresses don't pass through the router in either direction. (D) Packets with external source IP addresses don't enter the network from the outside.

14. Why should you avoid deleting log files on a daily basis? (A) An incident may not be discovered for several days and valuable evidence could be lost. (B) Disk space is cheap, and log files are used frequently. (C) Log files are protected and cannot be altered. (D) Any information in a log file is useless after it is several hours old.

15. What are ethics?(A) Mandatory actions required to fulfill job requirements(B) Laws of professional conduct(C) Regulations set forth by a professional organization(D) Rules of personal behavior

16. What is the end goal of disaster recovery planning?(A) Preventing business interruption(B) Setting up temporary business operations(C) Restoring normal business activity(D) Minimizing the impact of a disaster

複選題17. Which one of the following disaster types is not usually covered by standard business or homeowner's insurance? (A) Earthquake (B) Flood (C) Fire (D) Theft

114年 - 114 教育部公費留學考試試題：資訊安全概論#135195

113年 - [非官方正解]113 國立清華大學_碩士班考試入學試題:資訊安全#130695

113年 - 113 教育部公費留學考試試題：資訊安全概論#125716

112年 - [非官方正解]112 國立清華大學碩士班考試入學試題_資訊安全研究所：資訊安全#130782

112年 - 112 教育部公費留學考試試題：資訊安全概論#125717

111年 - [非官方正解]111 國立清華大學碩士班考試入學試題_資訊安全研究所：資訊安全#130742

111年 - 111 教育部_公費留學考試：資訊安全概論#125712

110年 - [非官方正解]109 國立清華大學_碩士班考試入學試題_資訊安全研究所：資訊安全#130996

110年 - 110 教育部公費留學考試試題：資訊安全概論#125719

110年 - [非官方正解]110 國立清華大學碩士班考試入學試題_資訊安全研究所:資訊安全#105636