1.1 Identify and Describe Vulnerabilities and Exploits CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A user receives an email with a PDF attachment. When the user opens the PDF, a vulnerability in the PDF reader is exploited, allowing the attacker to install malware on the user's computer. Which category of exploit is this?

   • AA client-side exploit, because it targets the PDF reader on the user's computer.
   • BA local exploit, because the malware is installed locally.
   • CA remote exploit, because the attacker is remote.
   • DA denial-of-service exploit, because it installs malware.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team discovers a vulnerability in a custom application. The team has a patch ready, but the patch requires a system reboot, which will cause downtime for a critical business service. The team must decide whether to apply the patch immediately or wait for a maintenance window. Which factor is most important in this decision?

   • AThe fact that the vulnerability is in a custom application, so it is not a high risk.
   • BThe severity of the vulnerability and the likelihood of exploitation.
   • CThe cost of the downtime to the business.
   • DThe fact that the patch is ready, so it should be applied immediately.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is assessing a web application. They find a form that is vulnerable to SQL injection. The tester uses a tool that automatically sends a series of malicious inputs to the form and extracts data from the database. In this scenario, what is the exploit?

   • AThe tool and the malicious inputs sent to the form.
   • BThe SQL injection vulnerability in the form.
   • CThe database that stores the data.
   • DThe penetration tester who is performing the assessment.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A developer is reviewing code for a web application that allows users to post comments. The application stores the comments and displays them to other users without any encoding or validation. An attacker posts a comment containing a malicious script that runs in the browser of every user who views the comment page. What is the vulnerability, and what is the exploit?

   • AThe vulnerability is cross-site scripting (XSS), and the exploit is the malicious script.
   • BThe vulnerability is a misconfiguration, and the exploit is the comment page.
   • CThe vulnerability is a buffer overflow, and the exploit is the comment posting.
   • DThe vulnerability is SQL injection, and the exploit is the malicious script.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security analyst is performing a risk assessment for a company. They identify that a legacy application on a server has a known flaw that could allow an attacker to gain unauthorized access. The analyst notes that the flaw is a weakness in the application's authentication logic. Which term best describes this weakness, and what is the most likely next step in the vulnerability lifecycle?

   • AIt is an exploit, and the next step is to develop a patch.
   • BIt is a zero-day, and the next step is to wait for the vendor to discover it.
   • CIt is a misconfiguration, and the next step is to change the configuration.
   • DIt is a vulnerability, and the next step is to develop and apply a patch.
   Reveal Solution Discussion Select an answer first