Vulnerabilities and Attack Surface CAS-005 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A security analyst discovers that a website's search feature reflects user input directly into the HTML page without proper encoding. An attacker crafts a URL that, when clicked by a victim, executes JavaScript in the victim's browser to steal session cookies. Which type of XSS vulnerability is this?

   • AReflected XSS
   • BBlind XSS
   • CStored XSS
   • DDOM-based XSS
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security scan of a web server reveals that it is using an outdated version of OpenSSL that is vulnerable to a known exploit. The server also has a default admin account enabled. Which action should be taken first?

   • ADisable the default admin account.
   • BImplement a WAF to block exploit attempts.
   • CUpdate OpenSSL to the latest patched version.
   • DChange the default admin password to a strong one.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security engineer is reviewing a web application that accepts a JSON payload from an API. The application uses the payload to construct a NoSQL query. The engineer is concerned about NoSQL injection. Which control is most effective at preventing this?

   • AUse a Web Application Firewall (WAF) to block requests containing '$' or '.' in the JSON.
   • BSanitize the JSON payload by removing all special characters.
   • CEncode the JSON payload using base64 before processing.
   • DValidate that the JSON payload matches a strict schema and reject any unexpected fields.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A security architect is designing a network for a financial institution. The design includes a firewall, an intrusion prevention system (IPS), and endpoint protection on all workstations. Which security principle is being implemented?

   • ADefense-in-depth
   • BLeast privilege
   • CFail-open design
   • DSeparation of duties
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A company is migrating its on-premises database to a cloud provider. The database contains sensitive customer data. The security team must ensure that data is encrypted at rest and in transit. Which combination of controls should be implemented?

   • ARely on the cloud provider's physical security to protect data.
   • BUse application-level encryption for all data before storing it in the database.
   • CEnable cloud provider's default encryption at rest and use TLS 1.2 for connections.
   • DEncrypt the database files using a custom algorithm developed in-house.
   Reveal Solution Discussion Select an answer first