Application Exploitation GDAT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is developing a new web application and wants to implement security controls from the start. The development team is considering various approaches to prevent SQL injection. Which of the following is the most effective and recommended practice?

   • AValidate user input against a whitelist of allowed characters
   • BEscape all user input before including it in SQL queries
   • CUse an object-relational mapping (ORM) framework that uses parameterized queries
   • DUse a web application firewall (WAF) to filter malicious input
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst is investigating a suspicious document that was emailed to an employee. The document contains a macro that, when enabled, downloads and executes a payload from a remote server. Which of the following best describes the exploitation technique used in this scenario?

   • AClient-side exploitation via a malicious document
   • BServer-side exploitation of a web application vulnerability
   • CBuffer overflow in the document viewer application
   • DSQL injection to deliver the payload through a database query
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization runs a critical legacy application that is no longer patched by the vendor. The application is exposed to the internet and has a known buffer overflow vulnerability. The security team must reduce the risk of exploitation while the application is being replaced. Which of the following controls is the most effective to implement immediately?

   • AIncrease the application's logging level to capture more attack details
   • BRestrict the application to a single user account with limited privileges
   • CPlace the application behind a web application firewall (WAF) with virtual patching
   • DDisable the application's error messages to prevent information disclosure
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team is analyzing a malware infection on a user's workstation. The initial infection vector was a malicious attachment in a phishing email. The attachment exploited a buffer overflow in the email client to execute code. Which of the following best describes the exploitation technique?

   • ASQL injection to deliver the payload through a database
   • BSocial engineering to trick the user into running the attachment
   • CServer-side exploitation of the email server
   • DClient-side exploitation of a memory corruption vulnerability
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is reviewing an incident where an attacker gained initial access to a corporate network. The attacker exploited a vulnerability in a web application to upload a web shell, then used that shell to execute commands on the server. Which of the following best describes the role of application exploitation in this attack chain?

   • AIt is a lateral movement technique used after the attacker already had access
   • BIt is the initial access vector that allowed the attacker to execute code on the server
   • CIt is a privilege escalation technique that elevated the attacker to administrator
   • DIt is a persistence mechanism that ensured the attacker retained access
   Reveal Solution Discussion Select an answer first