Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A penetration tester is assessing a company that uses a web-based email portal. The tester sends a crafted email to an employee that appears to be from the IT department, urging the employee to click a link and 'verify' their mailbox credentials. The link leads to a realistic fake login page that captures the username and password. After the employee submits the credentials, the tester immediately uses them to log into the real email portal and searches for sensitive documents. Which attack technique is the tester primarily demonstrating?

   • ACredential dumping from the local SAM database
   • BBrute-force password guessing against the email portal
   • CPhishing-based credential harvesting
   • DMan-in-the-middle session hijacking
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which technique involves an attacker sending fraudulent emails that appear to come from a trusted source to trick users into revealing their login credentials?

   • AKeylogging
   • BBrute force
   • CCredential dumping
   • DPhishing
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which password cracking method uses a precomputed table of hashes to quickly reverse a password hash?

   • ADictionary attack
   • BRainbow table attack
   • CKeylogging
   • DBrute force attack
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A threat actor has compromised a server in a corporate network. The actor wants to maintain persistent access and issue commands to the compromised host without being detected by the security operations center (SOC). The SOC monitors for unusual outbound connections to known malicious IP addresses. Which command and control (C&C) mechanism is most likely to evade this type of detection?

   • AICMP echo requests with a hidden payload
   • BDirect TCP connection to a fixed external IP address
   • CIRC connection to a public chat server
   • DHTTP communication to a legitimate-looking domain that changes periodically
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A penetration tester has gained initial access to a Windows workstation as a standard user. The tester runs a script that checks for services running with SYSTEM privileges that have weak file permissions, allowing the binary or configuration to be replaced. The tester replaces a service binary with a malicious executable and restarts the service, gaining SYSTEM-level access. Which privilege escalation technique is the tester using?

   • AAbusing a misconfigured service
   • BUsing a DLL search order hijacking
   • CExploiting a kernel vulnerability
   • DPerforming a pass-the-hash attack
   Reveal Solution Discussion Select an answer first