Grey-Box Security Test Tools CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A grey-box test of a web application found a reflected XSS vulnerability. The tester has the source code and knows the vulnerable parameter. What is the most important next step after confirming the vulnerability?

   • AImmediately report the vulnerability to the development team without further analysis
   • BDelete the test data and move on to the next test case
   • CDetermine the exploitability and impact by testing in a browser with the application's session context
   • DRun a network scan to check if the server is vulnerable to other issues
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team is developing a new file upload feature in a Java web application. They want to integrate a security test tool into their CI pipeline to catch vulnerabilities early. They have the source code and want to detect issues like path traversal and unsafe deserialization. Which tool category is most appropriate for this integration?

   • AA penetration testing framework used manually by a security expert
   • BA network vulnerability scanner that checks the server's operating system
   • CA dynamic application security testing (DAST) tool that runs against a deployed instance
   • DA static application security testing (SAST) tool that scans the codebase for dangerous patterns
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a static analyzer used in grey-box security testing?

   • AA tool that monitors memory usage and system calls during execution
   • BA tool that sends malformed inputs to a running application to cause crashes
   • CA tool that intercepts and modifies network traffic between client and server
   • DA tool that inspects source code for potential security flaws without executing the program
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A grey-box fuzzer found a crash in a C++ application. The tester has the source code and rebuilt it with AddressSanitizer. The sanitizer report shows a heap-buffer-overflow in a function that processes user input. What is the most important information to include in the vulnerability report?

   • AThe exact input that caused the crash, the stack trace, and the vulnerable function's line number
   • BThe operating system version and hardware specifications of the test machine
   • CThe name of the fuzzer and the duration of the test
   • DThe number of crashes found during the entire fuzzing campaign
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which tool category is specifically designed to send malformed or unexpected inputs to an application to trigger faults?

   • ADynamic analyzer
   • BFuzzer
   • CStatic analyzer
   • DPacket sniffer
   Reveal Solution Discussion Select an answer first