Why Applications Become Vulnerable to Attacks CASENET Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A bank's application was breached. The investigation shows that the attacker used a valid employee account to access customer records. The employee had recently been terminated but their account was not disabled. Which type of threat source does this represent?

   • ASocial engineering attack
   • BInsider threat
   • CExternal attacker
   • DThird-party component risk
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which human factor is most likely to lead to an application vulnerability?

   • AA developer making a mistake while implementing authentication logic
   • BA developer writing clear code comments
   • CA developer using version control
   • DA developer attending a security conference
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A development team is under pressure to deliver a new customer portal quickly. To save time, they skip the security code review and deploy the application with default credentials for the admin account. A week later, an attacker logs in with the default credentials and steals customer data. Which combination of factors most directly contributed to this vulnerability?

   • AExternal threat sources and social engineering
   • BInsecure coding practices and lack of security awareness
   • CMisconfiguration and lifecycle security gaps
   • DAttack surface expansion and threat modeling failure
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A developer at a software company is writing code for a new .NET web service. The developer has not received any security training and is unaware of common vulnerabilities. Which outcome is most likely to occur?

   • AThe developer will automatically use secure coding practices because the .NET framework enforces them.
   • BThe developer will be protected from vulnerabilities by the company's secure development policy.
   • CThe developer will introduce security flaws such as SQL injection or insecure deserialization because they do not know how to avoid them.
   • DThe developer will write secure code because the compiler rejects insecure patterns.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which scenario best illustrates a security misconfiguration that could make an application vulnerable?

   • AEnabling detailed error messages in production
   • BDisabling unused application features
   • CUsing HTTPS for all production traffic
   • DSetting strong password policies
   Reveal Solution Discussion Select an answer first