Identifying and Analyzing Vulnerabilities CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In risk assessment, what two factors are primarily considered to determine the risk of a vulnerability?

   • ARoot cause and exploitability
   • BSeverity and classification
   • CLikelihood and impact
   • DEvidence and reproduction steps
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which element should be included in a vulnerability report to help stakeholders understand the potential business consequences?

   • AThe tester's personal notes
   • BThe vulnerability's CVE ID only
   • CImpact analysis
   • DThe exact code patch
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   While analyzing the results of an automated vulnerability scan of a network, you notice a 'High' severity finding for 'SSL Certificate Expired' on an internal application server. The server is only accessible from the internal corporate network and is used by a small team for a non-critical project. What is the most appropriate next step?

   • AReport the finding exactly as the scanner rated it, as a high-severity issue, and recommend immediate renewal.
   • BImmediately renew the certificate and close the finding without further analysis, as expired certificates are always a critical security issue.
   • CIgnore the finding because it is on an internal server and does not pose a direct threat to the internet-facing perimeter.
   • DAnalyze the context of the finding, noting the low exposure and impact, and re-rate it as a lower severity in the final report.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   During a security test, a tester captures a screenshot of an error message that reveals sensitive information. What is the primary purpose of this action?

   • ATo collect evidence to support the vulnerability identification
   • BTo assess the risk of the vulnerability
   • CTo classify the vulnerability using CWE
   • DTo remediate the vulnerability
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   You have identified a vulnerability in a web application where user input is used to construct a file path for a download feature. By manipulating the input, an attacker can download arbitrary files from the server (e.g., /etc/passwd). You need to classify this vulnerability for the report. Which classification is the most accurate and useful for the development team?

   • ACWE-287 (Improper Authentication), as the attacker is bypassing authentication to access files.
   • BCWE-79 (Cross-Site Scripting), as it involves manipulating a URL or file path.
   • CCWE-200 (Exposure of Sensitive Information), as it allows the attacker to read sensitive files.
   • DCWE-22 (Improper Limitation of a Pathname to a Restricted Directory), commonly known as Path Traversal.
   Reveal Solution Discussion Select an answer first