Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is pivoting in the context of network attacks?

   • AEscalating privileges on a single system
   • BExfiltrating data from a compromised system
   • CMoving laterally within the same subnet
   • DUsing a compromised system as a relay to reach other systems that are not directly accessible
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   During an assessment, a tester obtains a file containing hashed passwords from a Linux server. The tester knows the organization enforces a policy requiring all passwords to be at least 12 characters, but a quick analysis shows that several hashes correspond to short, common words. The tester has a limited time window and wants to recover as many passwords as possible quickly. Which approach is most efficient for this situation?

   • ARun a brute-force attack trying every possible character combination up to 12 characters
   • BPerform a dictionary attack using a wordlist of common passwords and their variations
   • CAttempt to pass-the-hash directly to authenticate to other services
   • DUse a rainbow table lookup for the hashes
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Why are unpatched or outdated software systems often targeted by attackers?

   • AThey contain known vulnerabilities that have public exploits available
   • BThey are always running on older hardware
   • CThey are always connected to the internet
   • DThey have weaker encryption
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An attacker has compromised a workstation and needs to exfiltrate a small database file containing proprietary source code. The organization has strict egress filtering that blocks all outbound traffic except DNS queries to the corporate DNS server. The attacker wants to avoid detection by the network security team. Which method is most appropriate for covertly transferring the data?

   • AEncode the file and send it in chunks as DNS queries to a domain the attacker controls
   • BUse FTP to transfer the file to an external server
   • CAttach the file to an email and send it to an external address
   • DUpload the file to a public cloud storage service over HTTPS
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is investigating a malware infection on a user's laptop. The user reports that they received an email from an unknown sender with an attachment named 'Invoice_Q3.zip'. The user opened the attachment, and shortly after, the laptop began exhibiting suspicious behavior. The analyst wants to identify the initial infection vector. Which action by the user is the most likely cause of the infection?

   • AReplying to the sender of the email
   • BExtracting and executing the contents of the ZIP file
   • CAdding the sender to the contacts list
   • DOpening the email message itself
   Reveal Solution Discussion Select an answer first