Common Attack Scenarios CT-STE Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   What is the primary purpose of studying common attack scenarios in the context of security testing?

   • ATo identify potential weaknesses in a system that could be exploited by attackers.
   • BTo ensure that all security testing is performed by external experts.
   • CTo memorize a list of known vulnerabilities for certification exams.
   • DTo replace the need for security requirements analysis.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security tester is analyzing a past breach where attackers exploited a SQL injection vulnerability in a public-facing web form. The attackers then used the database access to extract hashed passwords and later cracked them to gain access to internal systems. Which mitigation would have been MOST effective in preventing the attackers from moving from the web form to the internal systems?

   • AImplementing network segmentation between the web tier and internal systems
   • BDeploying a Web Application Firewall (WAF) to block SQL injection attempts
   • CUsing parameterized queries to prevent SQL injection
   • DEnforcing a strong password policy for all users
   Reveal Solution Discussion Select an answer first