Exploit Techniques CCOA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security team is reviewing the mitigations for a legacy application that has a known buffer overflow vulnerability. The team cannot patch the application immediately. Which mitigation technique would make it more difficult for an attacker to execute arbitrary code by preventing the CPU from executing code in memory regions marked as non-executable?

   • AData Execution Prevention (DEP)
   • BCode signing
   • CAddress Space Layout Randomization (ASLR)
   • DApplication sandboxing
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester is documenting an exploit chain. The tester first sends a malicious input to a web application that causes a buffer overflow in a C library, allowing the tester to execute code. The tester then uses this code execution to create a new user account with administrative privileges. Which two concepts are being demonstrated in this chain?

   • AExploit mitigation (ASLR) and exploit categories (local).
   • BExploit execution mechanics (buffer overflow) and post-exploitation (privilege escalation).
   • CExploit delivery (phishing) and exploit categories (remote).
   • DExploit execution mechanics (injection) and post-exploitation (persistence).
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A developer is fixing a bug in a C++ application where a pointer to a memory object is used after the object has been freed. An attacker could exploit this bug to execute arbitrary code. Which exploit execution mechanism is being described, and which mitigation would be most effective to prevent this specific bug from being exploited?

   • AUse-after-free; fix the code to properly manage memory and avoid using freed pointers.
   • BBuffer overflow; enable ASLR on the system.
   • CSQL injection; use parameterized queries.
   • DUse-after-free; enable DEP on the system.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A user reports that after visiting a compromised website, their browser automatically downloaded and executed a malicious file without any user interaction. The malware then installed a backdoor. Which exploit delivery method and exploit category best describe this attack?

   • ADrive-by download; local exploit.
   • BDrive-by download; client-side exploit.
   • CDirect network exploitation; remote exploit.
   • DPhishing; client-side exploit.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which sequence best represents the general process of exploiting a vulnerability?

   • AAchieve objective, execute exploit, deliver exploit, identify vulnerability, develop exploit.
   • BDeliver exploit, identify vulnerability, execute exploit, achieve objective, develop exploit.
   • CIdentify vulnerability, develop or obtain exploit, deliver exploit, execute exploit, achieve objective.
   • DExecute exploit, achieve objective, identify vulnerability, deliver exploit, develop exploit.
   Reveal Solution Discussion Select an answer first