Chapter 13: Programming Exploits
1. What is the difference between programming languages and scripting languages?
2. What is the language upon which C++, C#, and PERL were based?
3. Give an example of vulnerability in languages written using the C or C++ programming
language?
4. Give an example of a strategy that can be used to mitigate the vulnerability identified in
Question 3?
5. Is the .NET framework commonly used with the UNIX operating system?
6. Give an example of vulnerability in applications built using the .NET framework?
7. What is a strategy for mitigating the vulnerability identified in Question 6?
8. Is HTML5 considered a dynamic language?
9. What are the three sorts of Java exploits?
10. _______ When the Internet was young, there were no servers.
11. _______ Data-driven sites contain thousands of pages of server-side code to provide a simple,
useful interface for e-commerce and other site types across all categories.
12. _______ The difference between a script and a programming language is that a script runs under
no control at all.
13. _______ Java is a script.
14. _______ C++ or Python applications need to be compiled to run within specific operating
systems.
15. _______ Java is designed to run in a virtual environment called the Java Virtual Machine or Java
Application Reservation (JAR).
16. _______ Java applications are not really acting independently, and this is one of the safeguards
built into the Java language.
17. HTML version 5 is still in the development stage. True or False?
18. The addition of enhanced functionality in the most recent version of HTML results in an
associated increase in the level of risk due to XSS. True or False?
19. _______ Microsoft’s answer to Netscape’s JavaScript language was .Net.
20. Java programs can be built through the use of existing components borrowed from other
sources. True or False?