Exploit Methodology and Analysis GMON Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which factor is most likely to affect the success of an exploit execution against a target system?

   • AThe target's internet browser history
   • BThe color scheme of the target's user interface
   • CThe target's power supply wattage
   • DThe target system's patch level
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which post-exploitation technique is used to maintain access to a compromised system across reboots?

   • ALateral movement
   • BData exfiltration
   • CPrivilege escalation
   • DPersistence
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security team must choose between deploying an intrusion detection system (IDS) and a web application firewall (WAF) to protect a web application. The team has a limited budget and wants to both detect and prevent exploits. Which solution is most appropriate?

   • AUse only network segmentation to limit exposure.
   • BDeploy a WAF, which can both detect and block exploit attempts.
   • CDeploy an IDS, which can detect but not block attacks.
   • DDeploy both an IDS and a WAF, but this may exceed the budget.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a primary method for detecting exploits in a network?

   • ADisabling unnecessary services on servers
   • BRegularly changing the administrator password
   • CIntrusion detection system (IDS) monitoring network traffic for known exploit signatures
   • DEncrypting all data at rest
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A vulnerability assessment identifies a remote code execution flaw in a network service. The team needs to determine the exploitability of the vulnerability before prioritizing remediation. Which action is most appropriate?

   • AWait for the vendor to release a patch before taking any action.
   • BDisable the service to eliminate the risk.
   • CImmediately apply a workaround without testing.
   • DDevelop a proof-of-concept exploit in a lab environment.
   Reveal Solution Discussion Select an answer first