Common Attack Scenarios CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common mitigation strategy against SQL injection attacks?

   • ARemoving all user input fields
   • BIncreasing the number of database connections
   • CDisabling all database logging
   • DUsing parameterized queries
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security tester is planning a penetration test for a company that uses both on-premises servers and cloud-based SaaS applications. The tester wants to identify the most likely attack scenarios that could affect the company. Which approach is MOST appropriate for this task?

   • ARely on the vendor's security certifications for the SaaS applications and test only the on-premises servers
   • BConsider both on-premises and cloud-based assets, and map out potential attack paths between them
   • CFocus only on the cloud-based SaaS applications, as they are more exposed to the internet
   • DFocus only on the on-premises servers, as they are under the company's direct control
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is an example of an attack vector that an attacker might use to gain unauthorized access to a web application?

   • ASQL injection through an input field
   • BRegular software updates
   • CFirewall configuration review
   • DStrong password policy
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement best describes why understanding common attack scenarios is relevant to security testing?

   • AIt allows testers to focus exclusively on verifying functional requirements.
   • BIt guarantees that all vulnerabilities will be discovered before release.
   • CIt helps testers design and execute tests that simulate realistic threats and validate security controls.
   • DIt replaces the need for automated security scanning tools.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security analyst is investigating an incident where an attacker used a spear-phishing email to deliver a malicious macro-enabled document. The document, when opened, downloaded and executed a remote access trojan (RAT). The RAT then established a command-and-control (C2) channel. Which phase of the attack lifecycle is the analyst observing when the RAT establishes the C2 channel?

   • ADelivery
   • BCommand and Control
   • CExploitation
   • DActions on Objectives
   Reveal Solution Discussion Select an answer first