Common Attack Scenarios CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security analyst is investigating an incident where an attacker gained access to a server via a brute-force attack on the SSH service. The attacker then used the server to launch attacks against other systems on the network. The analyst wants to determine the attacker's likely next step. Which phase of the attack lifecycle is the analyst MOST likely observing?

   • AReconnaissance
   • BLateral Movement
   • CExfiltration
   • DCommand and Control
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best describes the purpose of studying real-world attack case studies in security testing?

   • ATo replace the need for security awareness training for developers.
   • BTo provide a legal basis for prosecuting attackers.
   • CTo understand how vulnerabilities are exploited in practice and apply those lessons to improve testing.
   • DTo create a comprehensive list of all known malware signatures.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security tester is assessing a mobile banking application. The tester discovers that the app stores the user's session token in plain text in the device's shared preferences. Which attack vector is MOST directly enabled by this weakness?

   • ACross-site scripting in the app's web view
   • BSession hijacking via a malicious app on the same device
   • CSQL injection into the app's local database
   • DMan-in-the-middle attack on the network
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A tester is assessing a web application that allows users to upload profile pictures. The application stores files in a publicly accessible directory and serves them with the original filename. Which attack vector is MOST directly exposed by this configuration?

   • ASQL injection via the filename parameter
   • BMalicious file upload leading to remote code execution
   • CCross-site scripting via the image content
   • DDenial of service via oversized image dimensions
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is reviewing a breach that occurred in three stages: (1) an attacker exploited a vulnerability in a public-facing web server, (2) the attacker used the web server as a pivot point to access an internal database, and (3) the attacker exfiltrated customer data. The team has limited budget and can only implement one major control. Which control would be MOST effective in preventing the entire attack chain?

   • AEnforcing strong passwords on the database
   • BPatching the web server vulnerability
   • CDeploying a data loss prevention (DLP) system
   • DImplementing network segmentation between the web server and the database
   Reveal Solution Discussion Select an answer first