Exploit Methodology and Analysis GMON Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A vulnerability scanner flags a critical SQL injection in a legacy application. The team must decide whether to patch immediately or conduct further analysis. Which action best balances the need for immediate risk reduction with the need to understand the vulnerability?

   • AIgnore the scanner result because the application is legacy and not internet-facing.
   • BOnly monitor for exploitation attempts and defer patching to a later maintenance window.
   • CDelay patching until a full exploit is developed to confirm the risk.
   • DApply the vendor patch immediately and then analyze the vulnerability to update detection rules.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team has limited resources and must prioritize patching among three critical vulnerabilities: one in a public-facing web server, one in an internal database, and one in a client-side application. The team wants to minimize the risk of exploitation. Which vulnerability should be patched first?

   • APatch all three simultaneously to avoid prioritization.
   • BThe public-facing web server vulnerability, because it is exposed to the internet.
   • CThe internal database vulnerability, because it contains sensitive data.
   • DThe client-side application vulnerability, because users interact with it daily.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A penetration tester is attempting to exploit a vulnerability in a web application. The application is protected by a WAF that blocks common attack patterns. The tester needs to bypass the WAF to execute the exploit. Which technique is most likely to succeed?

   • AIncrease the number of requests to overwhelm the WAF.
   • BEncode the payload in a way that the WAF does not recognize.
   • CDisable the WAF by exploiting a separate vulnerability.
   • DSend the payload in plain text to avoid detection.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a common delivery mechanism for an exploit?

   • AA malicious email attachment
   • BA firewall rule
   • CA vulnerability scanner
   • DA patch management system
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security analyst is reviewing a series of alerts that indicate an attacker may have exploited a vulnerability, escalated privileges, and then moved laterally. The analyst needs to determine the most likely sequence of events to guide the investigation. Which sequence aligns with the exploit lifecycle?

   • AExploitation, privilege escalation, lateral movement, persistence.
   • BLateral movement, exploitation, persistence, privilege escalation.
   • CPrivilege escalation, lateral movement, exploitation, persistence.
   • DPersistence, exploitation, lateral movement, privilege escalation.
   Reveal Solution Discussion Select an answer first