Application Exploitation GDAT Practice Questions (Page 9)

Questions 41–44

1. 41application · medium

   An attacker is attempting to exploit a web application that has a file upload feature. The attacker uploads a file named `shell.php.jpg` and then requests the file directly in the browser. The server executes the file as PHP. Which of the following is the most likely reason the attack succeeds?

   • AThe application does not check the file size
   • BThe application does not validate the file content type
   • CThe server is configured to execute files based on the last extension in the filename
   • DThe application stores the file in a directory with execute permissions
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   In the Execution phase of an attack, how does application exploitation typically contribute?

   • AIt ensures that the attacker's code remains undetected by antivirus software.
   • BIt collects credentials from memory to enable further access.
   • CIt provides a mechanism to run attacker-controlled code on the target system, often as a direct result of the exploitation.
   • DIt establishes persistence by modifying system services to run the attacker's code at startup.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A security analyst is investigating a series of failed login attempts on a web application. The analyst notices that the application logs contain SQL syntax in the username field, such as `admin'--`. The application uses parameterized queries for authentication. Which of the following is the most likely explanation?

   • AThe application is vulnerable to command injection because the username is passed to a shell
   • BThe application is vulnerable to SQL injection despite using parameterized queries
   • CThe application is not vulnerable to SQL injection because parameterized queries are used, and the attempts are automated scanning
   • DThe application is vulnerable to XSS because the username field is reflected
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company has a legacy web application that is vulnerable to both SQL injection and XSS. The application is scheduled to be replaced in six months. The security team must reduce the risk of exploitation while maintaining full functionality. Which of the following is the most balanced approach?

   • AImplement a WAF with rules to block SQL injection and XSS payloads
   • BRewrite the application's code to fix the vulnerabilities
   • CDisable the vulnerable features until the application is replaced
   • DIncrease the application's logging and monitoring
   Reveal Solution Discussion Select an answer first