Hide Vulnerability CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration test reveals a SQL injection vulnerability in a legacy application that is scheduled to be decommissioned in 18 months. The application is business-critical and cannot be taken offline for a major refactor. What is the most practical remediation guidance to provide in the report?

   • ASuggest implementing a Web Application Firewall (WAF) as an immediate compensating control, while planning to migrate to the new system before decommissioning.
   • BState that the vulnerability is 'low risk' because the application is being decommissioned, and no action is required.
   • CRecommend an immediate full rewrite of the application using a modern framework with built-in parameterized queries.
   • DAdvise the client to simply monitor logs for suspicious database queries and hope no attack occurs.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A tester is writing a report and needs to explain the severity of a vulnerability to a client. The vulnerability allows an attacker to cause a denial of service (DoS) on a public-facing web server by sending a single, specially crafted request. How should the tester classify this vulnerability?

   • AMedium severity, because it affects availability but not confidentiality or integrity.
   • BCritical severity, because it could lead to a complete system compromise.
   • CLow severity, because it does not result in data loss or theft.
   • DHigh severity, because it is easily exploitable and can cause significant disruption to a critical business service.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team discovers a critical vulnerability in a custom-built application. The development team is overwhelmed with feature requests and does not have the capacity to fix the vulnerability for at least six months. The application is internet-facing and processes sensitive customer data. What is the most appropriate immediate action for the security team to recommend?

   • AImplement a Web Application Firewall (WAF) with custom rules to block the specific attack patterns while the development team works on a fix.
   • BAccept the risk and document it in the risk register, as the development team is too busy.
   • CRequire all users to change their passwords immediately.
   • DTake the application offline until the vulnerability is fixed.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Why is it important to tailor the communication of vulnerability findings to the audience?

   • AIt is only necessary to communicate with technical audiences
   • BTechnical and non-technical audiences have different levels of understanding and need different levels of detail
   • CTailoring the message ensures that the vulnerability is not taken seriously
   • DTailoring the message is a way to hide the true severity of the vulnerability
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security researcher discovers a critical remote code execution vulnerability in a widely used open-source web server. The researcher has confirmed the flaw in a lab environment and has a working proof-of-concept. The vendor has a public bug tracker but no dedicated security contact. What is the most appropriate first step for the researcher?

   • APost the full technical details and proof-of-concept to the public bug tracker to ensure the issue is visible.
   • BContact the vendor's security team or maintainers through a private channel, such as a security contact email or private bug tracker entry, to coordinate a fix.
   • CSell the vulnerability information to a government agency for maximum financial gain.
   • DImmediately publish a proof-of-concept on social media to pressure the vendor into releasing a quick fix.
   Reveal Solution Discussion Select an answer first