Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a common vulnerability found in unpatched or outdated software?

   • AKnown CVE with a public exploit
   • BMisconfigured firewall rules
   • CSocial engineering
   • DWeak passwords
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An attacker has compromised a web server in a DMZ. The attacker wants to reach internal database servers that are not directly accessible from the internet. The attacker uses the compromised web server as a relay to send traffic to the internal database network. Which technique is the attacker using?

   • APort scanning
   • BPivoting
   • CDNS rebinding
   • DSpoofing
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An attacker has compromised a server in a segmented network. The attacker wants to move laterally to a database server in a different subnet. The attacker has captured a set of credentials for a service account that has administrative privileges on the database server. The attacker also has a C&C channel to the compromised server. Which sequence of actions is most appropriate for lateral movement?

   • AUse a SQL injection attack against the database server
   • BUse the captured credentials to authenticate to the database server via a remote administration protocol (e.g., RDP or WinRM)
   • CPerform a brute-force attack on the database server's local accounts
   • DUpload a web shell to the database server
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security team is responding to a breach. They discover that an attacker gained initial access via a phishing email, then used a local privilege escalation exploit to gain SYSTEM-level access on a single workstation. Over the next six months, the attacker slowly moved laterally to other systems, using legitimate administrative tools and credentials, and exfiltrated small amounts of data periodically. The attacker's activity was only discovered after a routine audit. Which characteristic of this attack most strongly indicates an Advanced Persistent Threat (APT)?

   • AThe slow, stealthy lateral movement and periodic data exfiltration over six months
   • BThe use of a phishing email for initial access
   • CThe use of a local privilege escalation exploit
   • DThe use of legitimate administrative tools
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   An attacker uses malware to record every keystroke a user types, including usernames and passwords. Which credential harvesting technique is being used?

   • AKeylogging
   • BCredential dumping
   • CPhishing
   • DRainbow table attack
   Reveal Solution Discussion Select an answer first