Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a wordlist in the context of password cracking?

   • AA list of network ports to scan
   • BA list of hash algorithms
   • CA list of usernames to target
   • DA file containing a list of potential passwords
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which command would show file permissions on a Linux system?

   • Aifconfig
   • Bls -l
   • Cps aux
   • Dnetstat -a
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which technique is used to perform DNS poisoning?

   • AUsing social engineering to trick users
   • BExploiting a buffer overflow in a web browser
   • CSending forged DNS responses to a resolver
   • DOverloading a web server with requests
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How is a backdoor typically installed on a system?

   • ABy sending a phishing email to the system administrator
   • BBy changing the system's IP address
   • CBy physically connecting a keyboard to the system
   • DBy exploiting a vulnerability or through malware
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is Wireshark used for?

   • AExploiting web application vulnerabilities
   • BCapturing and analyzing network traffic
   • CCracking password hashes
   • DScanning for open ports
   Reveal Solution Discussion Select an answer first