Use the following scenario to answer the next three questions: Dr. Kasimi is planning on conducting a study next semester. He is curious as to whether exposure to fear is associated with poorer cognitive performance. He has participants enter the lab and asks them to view a slide show of photos. At the end of the slide show, a scary picture of a clown is displayed accompanied by a loud noise. After the last image is shown, participants are given a math test.

See the scenario above: To address the Belmont principle of beneficence, Dr. Kasimi would need to ask which of the following questions?

See the scenario above: Dr. Kasimi asks his participants to provide informed consent. Doing this is adhering to which principle of the Belmont Report?

In order to study participants from a specific ethnic group, researchers must first show that the topic of the study is more frequent in that ethnic group. This is an application of which Belmont principle?

Why do we label double-barreled questions as troublesome?

You are analyzing the HTTP communication between a web browser and a RESTful API for an online bookstore. A user requests information about a book with ISBN “978-0321765723” using the endpoint /books/978-0321765723. Here are the captured requests and responses:   Request: GET /books/978-0321765723 HTTP/1.1 Host: api.bookstore.example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive   Response: HTTP/1.1 200 OK Date: Tue, 26 Oct 2023 14:30:00 GMT Content-Type: application/json Content-Length: 250 Connection: keep-alive {   “isbn”: “978-0321765723”,   “title”: “Clean Code: A Handbook of Agile Software Craftsmanship”,   “author”: “Robert C. Martin”,   “price”: 34.99,   “available”: true }   What is the function of the “Content-Length: 250” header in the response?

Given the following code, answer the questions.     a) Please explain which feature you can add to mitigate the CSRF vulnerability and ensure that the cookie is inaccessible to JavaScript, preventing it from being accessed through document.cookie, and the cookie is only sent over HTTPS connections (15 points).   b) Fix the previous code by adding the features required to protect the system (10 points).

Given the following code, answer the questions.     a) Analyze each part of the code and explain the present weaknesses (10 points).   b) Rewrite or describe how to modify the code to fix the previous weakness (10 points).  

A security analyst is investigating a recent incident at a small e-commerce company. The analyst has gathered the following information: Initial Observation: An employee received an email with a malicious PDF attachment disguised as an invoice. Action: The employee opened the PDF, which exploited a known vulnerability in their PDF reader software. Result: The exploit allowed the attacker to install a remote access tool on the employee’s computer. Further Action: The attacker then used the remote access tool to move laterally within the network, eventually gaining access to the company’s customer database server. In which phase of the Cyber Kill Chain did the employee opening the malicious PDF attachment occur?

SQL injection is a common vulnerability allowing attackers to manipulate a database by injecting malicious SQL code into input fields. Below is a piece of JavaScript code that interacts with a MySQL database using user input. Unfortunately, this code is vulnerable to SQL injection.     Database Name: user_database Tables: users (columns: id, username, password) admin_logs (columns: log_id, admin_action, timestamp)   Question: Explain why the provided JavaScript code is vulnerable to SQL injection. Describe the specific part of the code that leads to this vulnerability (It is required to cite how the exploitation happens line-by-line) (10 points).   Provide an example of a malicious input that an attacker could send to the /getUser endpoint to retrieve all entries from the admin_logs table (the input must work) (10 points).