Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A web application has a search feature that takes a user-supplied term and inserts it directly into a SQL query without sanitization. A tester wants to extract the contents of a table named 'users' that contains credentials. The application returns an error message that includes the full SQL query text. Which payload would most directly achieve the tester's goal?

   • A'; DROP TABLE users; --
   • B' OR '1'='1
   • C' UNION SELECT username, password FROM users --
   • D'; EXEC xp_cmdshell('whoami'); --
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An attacker has compromised a server and needs to exfiltrate a sensitive database file. The organization has implemented data loss prevention (DLP) that monitors outbound traffic for sensitive data patterns and blocks large file transfers. The attacker wants to avoid detection. Which exfiltration method is most likely to evade the DLP controls?

   • AEmail the file as an attachment to an external address
   • BUse FTP to transfer the file to an external server
   • CCompress the file, encrypt it, and send it via HTTPS to a cloud storage service
   • DSplit the file into small chunks and send them as DNS queries to an attacker-controlled server
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An attacker gains access to a service running with elevated privileges due to a misconfiguration that allows the service to run with more permissions than necessary. Which privilege escalation technique is this?

   • ASQL injection
   • BExploiting misconfigurations
   • CKeylogging
   • DKernel exploit
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   During active reconnaissance, an attacker discovers that a web server is running an outdated version of Apache with a known remote code execution vulnerability. Which type of exploit would be most appropriate to select?

   • AA password spraying attack against user accounts
   • BA remote code execution exploit targeting the Apache vulnerability
   • CA client-side exploit targeting web browsers
   • DA denial-of-service exploit targeting the network
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which malware infection vector involves tricking a user into opening a malicious file attached to an email?

   • ANetwork share
   • BMalicious website
   • CRemovable media
   • DEmail attachment
   Reveal Solution Discussion Select an answer first