Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A penetration tester is on a network and wants to perform a man-in-the-middle attack to intercept credentials from a target host. The tester wants a tool that can automate ARP poisoning and also capture the intercepted traffic. Which tool is best suited for this task?

   • AWireshark
   • BEttercap
   • CJohn the Ripper
   • DHydra
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A penetration tester successfully performs ARP poisoning to intercept traffic between a user and a web application. The application uses HTTPS, and the tester cannot decrypt the TLS session. However, the tester notices that the application sets a session cookie without the Secure flag. Which technique could the tester use to hijack the user's session despite the HTTPS encryption?

   • AUse John the Ripper to crack the TLS private key
   • BUse Hydra to brute-force the session ID
   • CDowngrade the connection to HTTP and capture the session cookie sent in cleartext
   • DPerform DNS poisoning to redirect the user to a fake login page
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the risk of poorly configured file permissions?

   • AFiles are deleted automatically
   • BFiles are automatically encrypted
   • CFiles are moved to a different directory
   • DSensitive files may be readable or writable by unauthorized users
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is John the Ripper used for?

   • AOffline password cracking from hash files
   • BOnline password guessing against live services
   • CNetwork traffic capture
   • DVulnerability scanning
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a distributed denial-of-service (DDoS) attack?

   • AAn attack that sends phishing emails to many users
   • BAn attack that changes DNS records to redirect traffic
   • CAn attack that uses multiple compromised systems to flood a target with traffic
   • DAn attack that exploits a single vulnerability to gain access
   Reveal Solution Discussion Select an answer first