Penetration Testing Application GCED Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   During an internal penetration test, a tester discovers a web application that uses a custom login form. The tester has already enumerated valid usernames through a password reset feature. The tester wants to identify whether the application is vulnerable to SQL injection in the username field without causing a denial of service. Which technique is most appropriate?

   • ASubmit a single-quote character in the username field and observe the application's error response.
   • BUse Burp Suite's Intruder to brute-force the password for a known username.
   • CAttempt to log in with a random username and password to see if the application returns a generic error.
   • DRun a full SQLmap automated scan with high thread count against the login form.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A penetration testing team has completed an engagement and is writing the final report. The client's management wants a clear understanding of which vulnerabilities pose the greatest risk to the business. The report must also provide actionable steps for remediation. Which approach best meets these requirements?

   • AInclude raw scan output and exploit code for every vulnerability.
   • BRank vulnerabilities by CVSS score and include a remediation plan for each.
   • CList all vulnerabilities in the order they were discovered, with a brief description of each.
   • DProvide only the critical vulnerabilities and omit low-risk findings to avoid overwhelming management.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is asked to determine whether a newly discovered vulnerability in a web server can be exploited to gain unauthorized access. The analyst has already run a vulnerability scanner that confirmed the vulnerability exists. What is the next step to assess the actual risk?

   • ARun another vulnerability scanner with a different tool to confirm the finding.
   • BDocument the vulnerability in the report and move on to the next asset.
   • CPatch the vulnerability immediately without further analysis.
   • DAttempt to exploit the vulnerability in a controlled test environment.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester has identified a remote code execution vulnerability in a web application. The tester wants to demonstrate the impact by gaining a foothold on the server. Which technique is most appropriate?

   • ARun a vulnerability scanner to confirm the RCE vulnerability.
   • BUpload a web shell to the server and execute commands.
   • CDocument the vulnerability and move on to the next target.
   • DSend a crafted HTTP request to crash the web server.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A penetration tester is assessing a large network and has identified several potential vulnerabilities using an automated scanner. The tester needs to prioritize which vulnerabilities to exploit first. The client's primary concern is preventing a data breach. Which factor should the tester prioritize?

   • AThe age of each vulnerability
   • BThe number of systems affected by each vulnerability
   • CThe potential impact of each vulnerability on sensitive data
   • DThe ease of exploitation of each vulnerability
   Reveal Solution Discussion Select an answer first