Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which privilege escalation technique involves exploiting a vulnerability in the operating system kernel to gain higher privileges?

   • APhishing
   • BCredential dumping
   • CKernel exploit
   • DMisconfiguration exploitation
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester is assessing a network and finds a server running an old version of a content management system (CMS). The tester wants to find a suitable exploit for a known vulnerability in this CMS version. Which resource is most appropriate for the tester to consult first?

   • AThe network's firewall configuration
   • BThe vendor's official documentation for the CMS
   • CThe CVE database and public exploit repositories
   • DThe server's system log files
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a common technique used by attackers to establish a command and control channel while evading detection?

   • AUsing only encrypted email
   • BUsing only direct IP connections
   • CUsing standard protocols like HTTP or DNS
   • DUsing only physical media
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which phase of the APT lifecycle involves establishing a foothold in the target network?

   • AReconnaissance
   • BInitial compromise
   • CExfiltration
   • DCleanup
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is performing an assessment and discovers that a Windows server is running an outdated version of a third-party application. The tester checks the CVE database and finds a critical remote code execution vulnerability in that exact version. The tester also notes that the application is listening on a network port. Which action should the tester take to exploit this vulnerability?

   • AScan the network for other systems running the same application
   • BPerform a brute-force attack on the application's login page
   • CUse a publicly available exploit for the specific CVE against the application's listening port
   • DAttempt a SQL injection attack against the application's database
   Reveal Solution Discussion Select an answer first