Vulnerabilities SY0-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   An attacker injects malicious JavaScript into a web page that is then executed in other users' browsers. Which web-based vulnerability is this?

   • ASQL injection
   • BBuffer overflow
   • CCross-site request forgery (CSRF)
   • DCross-site scripting (XSS)
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A cloud service provider experiences a security incident that exposes customer data stored in a shared database. Which cloud-specific vulnerability is this?

   • AData breach
   • BVirtual machine escape
   • CPrivilege escalation
   • DBuffer overflow
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company runs a virtualized environment with multiple VMs on a single host. A security scan identifies that the hypervisor has a known vulnerability that could allow a guest VM to access the host's memory. Which of the following is the MOST appropriate mitigation?

   • AIsolate each VM on a separate physical host.
   • BApply the hypervisor vendor's security patch.
   • CDisable VM snapshots.
   • DEnable network segmentation between VMs.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company runs multiple virtual machines on a single hypervisor host. A security analyst discovers that a vulnerability in the hypervisor's network driver allows a guest VM to execute code on the host operating system. Which of the following BEST describes this type of attack?

   • APrivilege escalation
   • BVM escape
   • CHypervisor denial of service
   • DGuest-to-guest attack
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company uses a cloud-based SaaS application for HR management. The SaaS provider announces a data breach that exposed employee records. The company's contract with the provider includes a shared responsibility model. Which of the following is the MOST important action for the company to take?

   • AReview the incident response plan and notify affected employees as required by regulations.
   • BDemand that the provider refund the subscription fees.
   • CDisable all user accounts in the SaaS application.
   • DSwitch to a different SaaS provider immediately.
   Reveal Solution Discussion Select an answer first