What two conditions must a digital signature meet? 

While testing a web application in development, you notice that the web server does not properly ignore the “dot dot slash” (../) character string and instead returns the file listing of a folder structure of the server. What kind of attack is possible in this scenario?

You are the lead cybersecurity analyst at a multinational corporation that uses a hybrid encryption system to secure inter-departmental communications. The system uses RSA encryption for key exchange and AES for data encryption, taking advantage of the strengths of both asymmetric and symmetric encryption. Each RSA key pair has a size of 'n' bits, with larger keys providing more security at the cost of slower performance. Thetime complexity of generating an RSA key pair is O(n*2), and AES encryption has a time complexity of O(n).

Given *n=4000' and variable ‘AES key size’, which scenario is likely to provide the best balance of security

and

performance? which scenario would provide the best balance of security and performance?

What type of analysis is performed when an attacker has partial knowledge of inner-workings of the application? 

An ethical hacker is testing the security of a website's database system against SQL Injection attacks. They discover that the IDS has a strong signature detection mechanism to detect typical SQL injection patterns. Which evasion technique can be most effectively used to bypass the IDS signature detection while performing a SQL Injection attack?