An Online Bank Has Contracted with a Consultant to Perform

question 83

Multiple Choice

An online bank has contracted with a consultant to perform a security assessment of the bank's web portal. The consultant notices the login page is linked from the main page with HTTPS, but when the URL is changed to HTTP, the browser is automatically redirected back to the HTTPS site. Which of the following is a concern for the consultant, and how can it be mitigated?

• A) XSS could be used to inject code into the login page during the redirect to the HTTPS site. The consultant should implement a WAF to prevent this.
• B) The consultant is concerned the site is using an older version of the SSL 3.0 protocol that is vulnerable to a variety of attacks. Upgrading the site to TLS 1.0 would mitigate this issue.
• C) The HTTP traffic is vulnerable to network sniffing, which could disclose usernames and passwords to an attacker. The consultant should recommend disabling HTTP on the web server.
• D) A successful MITM attack Could intercept the redirect and use sslstrip t o decrypt further HTTPS traffic. Implementing HSTS on the web server would prevent this. A successful MITM attack Could intercept the redirect and use sslstrip t o decrypt further HTTPS traffic. Implementing HSTS on the web server would prevent this.

Distinguish between unilateral and mutual mistakes and their respective effects on contract validity and enforceability.

Learn about the principles of legal assent in contract law and how courts determine the enforceability of contracts.

Understand the legal remedies and consequences of contract disputes arising from mistakes or misrepresentations.

Gain knowledge on how undue influence and duress affect the legitimacy of consensual agreements.

---

Definitions:

Production Possibility Frontier

A graphical representation showing the maximum quantity of different goods that can be produced with a given set of resources and technology.

Opportunity Costs

The cost of an alternative that must be forgone in order to pursue a certain action or decision.

Production Possibility

An economic model that shows the maximum combination of goods or services that can be produced with a given set of resources.

Current State

The present condition or situation of a system, process, or subject of study.