Identifying and Analyzing Vulnerabilities CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A tester wants to categorize a vulnerability using a standard framework that provides a common language for software weaknesses. Which framework is specifically designed for this purpose?

   • APTES (Penetration Testing Execution Standard)
   • BCWE (Common Weakness Enumeration)
   • CCVSS (Common Vulnerability Scoring System)
   • DOSSTMM (Open Source Security Testing Methodology Manual)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which classification framework is commonly used to categorize web application security vulnerabilities, such as injection and broken authentication?

   • AOWASP Top Ten
   • BNIST SP 800-53
   • CPCI DSS
   • DISO 27001
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   You have successfully exploited a SQL injection vulnerability in a legacy CRM application, retrieving a list of user records. Before you document this finding, you need to ensure the evidence is sufficient for the development team to reproduce the issue and for management to understand the impact. Which set of evidence is most appropriate to collect?

   • AThe full HTTP request and response, including the injected payload, a timestamp, and a screenshot of the output, with sensitive data redacted.
   • BA verbal summary of the finding in the daily stand-up meeting, with a promise to provide details later.
   • CA screenshot of the final result showing the user records, and the URL of the vulnerable page.
   • DA copy of the database table structure and a list of all the data extracted from the database.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   You have completed the testing phase and identified a critical remote code execution vulnerability in an internal file upload feature. The client's development team is unfamiliar with the affected technology stack. What is the most effective way to structure the 'Recommended Fix' section of your vulnerability report?

   • AState that the vulnerability is critical and that the application should be taken offline immediately, without providing technical details.
   • BProvide a link to the vendor's security advisory and a general recommendation to 'apply the latest patches'.
   • CDescribe the fix in abstract terms, such as 'implement proper input validation' and 'use a secure file upload library'.
   • DProvide a step-by-step remediation guide that includes specific code-level changes, configuration updates, and a reference to the relevant CWE and OWASP guideline.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is an example of evidence that a tester should collect to support a vulnerability finding?

   • AThe exact test data used to trigger the vulnerability
   • BThe estimated cost of remediation
   • CThe tester's personal opinion about the severity
   • DThe name of the developer who wrote the code
   Reveal Solution Discussion Select an answer first