1.2 Describe Security Vulnerabilities and Exploits Such as Software Bugs, Weak And/or Hardcoded Passwords, OWASP Top Ten, Missing Encryption Ciphers, Buffer Overflow, Path Traversal, Cross-Site Scripting/forgery, SQL Injection, and Identification and Prioritization Using CVEs and CVSS Scores 350-701 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the typical result of a buffer overflow that allows an attacker to execute arbitrary code?

   • AThe attacker can inject malicious scripts into web pages.
   • BThe attacker is able to read arbitrary files on the server.
   • CThe attacker overwrites adjacent memory to control the program's execution flow.
   • DThe attacker gains direct access to the database without authentication.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A web application allows users to download files by specifying a filename in the URL, such as /download?file=report.pdf. An attacker discovers that by using ../etc/passwd, they can retrieve the system's password file. Which vulnerability is being exploited, and what is the most effective mitigation?

   • ABuffer overflow; use safe functions.
   • BPath traversal; validate and sanitize user input to prevent directory traversal.
   • CCross-site scripting; encode output.
   • DSQL injection; use prepared statements.
   Reveal Solution Discussion Select an answer first
4. 28expert · medium

   A web application allows users to upload and download files. The application stores files in a directory and uses the filename provided by the user to retrieve them. An attacker discovers that by using encoded traversal sequences like %2e%2e%2f, they can access files outside the intended directory. The application currently only filters for '../'. Which action should be taken to effectively mitigate this vulnerability?

   • AStore files in a database instead of the filesystem.
   • BUse a blacklist of common traversal sequences.
   • CDecode user input before validation and use a whitelist of allowed filenames.
   • DBlock all requests containing '%' characters.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is an example of a weak encryption cipher that should be avoided?

   • ATLS 1.3
   • BAES-256
   • CRC4
   • DRSA-2048
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which coding practice is most effective in preventing SQL injection?

   • AUsing parameterized queries or prepared statements.
   • BUsing strong encryption for database connections.
   • CImplementing role-based access control.
   • DDisabling error messages on the server.
   Reveal Solution Discussion Select an answer first