1.1 Identify and Describe Vulnerabilities and Exploits CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An attacker sends a specially crafted network packet to a server that is listening on a public port. The packet exploits a bug in the server's network stack, allowing the attacker to execute commands on the server without any user interaction. Which category of exploit is this?

   • AA denial-of-service exploit, because it executes commands.
   • BA remote exploit, because the attacker sends a packet over the network.
   • CA local exploit, because the attacker is on the network.
   • DA client-side exploit, because it targets a server.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why are zero-day vulnerabilities considered particularly significant in cybersecurity?

   • ABecause they only affect legacy systems
   • BBecause there is no available patch, leaving systems vulnerable to exploitation
   • CBecause they are always exploited by nation-state actors
   • DBecause they are easy to detect with standard security tools
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security analyst is reviewing a web application that has a search function. The application is vulnerable to both SQL injection and cross-site scripting (XSS). The analyst must recommend a single fix that addresses both vulnerabilities. Which of the following is the most effective approach?

   • AUse parameterized queries for database access and encode all output.
   • BOnly use parameterized queries for database access.
   • COnly encode all output.
   • DUse a web application firewall (WAF) to block malicious requests.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which vulnerability type occurs when an application writes more data to a memory buffer than it was allocated to hold?

   • ACross-site scripting (XSS)
   • BBuffer overflow
   • CMisconfiguration
   • DSQL injection
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best defines an exploit in cybersecurity?

   • AA type of malware that replicates itself across networks
   • BA weakness in a system that can be accidentally triggered
   • CA security control that prevents unauthorized access
   • DA technique, code, or tool that takes advantage of a vulnerability to compromise a system
   Reveal Solution Discussion Select an answer first