Identifying and Analyzing Vulnerabilities CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A tester has confirmed that a cross-site scripting (XSS) vulnerability can be exploited to steal session cookies. Which aspect of vulnerability analysis does this confirmation address?

   • ARisk likelihood
   • BRemediation
   • CExploitability
   • DRoot cause
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key characteristic of an effective vulnerability report?

   • AIt uses technical jargon without explanation
   • BIt focuses only on the technical details without business context
   • CIt includes clear reproduction steps and impact
   • DIt lists all vulnerabilities without prioritization
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   You have discovered a vulnerability in a mobile application's API that exposes other users' personal data due to an insecure direct object reference (IDOR). The issue is in a production environment. What is the most critical piece of information to include in the initial report to the client's management team?

   • AA recommendation to immediately shut down the API to prevent further data exposure.
   • BA clear statement of the business impact, such as the type and volume of personal data exposed, and the potential regulatory consequences.
   • CA detailed step-by-step reproduction guide so the management team can verify the vulnerability themselves.
   • DThe exact HTTP request and response that demonstrates the vulnerability, along with the specific API endpoint.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   After identifying a SQL injection vulnerability in a search feature, a tester examines the code and determines that the root cause is the direct concatenation of user input into a SQL query. Which activity does this examination represent?

   • AEvidence collection
   • BRisk assessment
   • CVulnerability analysis
   • DVulnerability identification
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   During a penetration test, you find that a web application is vulnerable to a time-based blind SQL injection. The application is behind a Web Application Firewall (WAF) that blocks requests containing common SQL keywords like 'AND', 'OR', and 'SELECT'. You have confirmed the vulnerability using a payload that avoids these keywords. What is the most important consideration for your final report?

   • ADocument the WAF bypass in detail, including the specific payload used, and recommend that the WAF rules be updated as part of the remediation.
   • BRecommend that the WAF be configured to block all requests to the vulnerable endpoint, as this is a simpler fix than remediating the application code.
   • CReport the vulnerability as 'low' severity because the WAF provides a partial mitigation, even though it can be bypassed.
   • DFocus the report on the SQL injection vulnerability itself and only mention the WAF in passing, as it is a separate control.
   Reveal Solution Discussion Select an answer first