Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which type of attack involves inserting malicious SQL statements into an application's database query to manipulate or retrieve data?

   • ACommand injection
   • BBuffer overflow
   • CCross-site scripting
   • DSQL injection
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   An attacker exploits a vulnerability that allows them to write data beyond the allocated memory buffer, potentially overwriting adjacent memory and executing arbitrary code. Which attack is this?

   • ACross-site scripting
   • BCommand injection
   • CSQL injection
   • DBuffer overflow
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A penetration tester is assessing a web application that has a file upload feature. The tester discovers that the application does not validate the file type and stores uploaded files in a directory that is accessible via the web root. The tester wants to achieve remote code execution on the server. Which approach is most likely to succeed?

   • AUpload a file with a double extension (e.g., .php.jpg) to bypass filters
   • BUpload a malicious image file that exploits a viewer vulnerability
   • CUpload a web shell and access it via the web browser
   • DUpload a large file to cause a denial of service
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is lateral movement in the context of a network attack?

   • AMoving data out of the network
   • BMoving from one compromised system to another within the same network
   • CMoving malware to a different network
   • DMoving from an external network to the internal network
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   During active reconnaissance, a penetration tester discovers that a target web server is running Apache 2.4.49 on port 80. The tester also notices that the server has a directory traversal vulnerability that allows reading arbitrary files. Which exploit is most appropriate to use based on this reconnaissance?

   • AA known CVE for Apache 2.4.49 that allows path traversal and file disclosure
   • BA brute-force attack against the SSH service on port 22
   • CA buffer overflow exploit targeting the operating system kernel
   • DA generic SQL injection payload against the web application
   Reveal Solution Discussion Select an answer first