1.1 Identify and Describe Vulnerabilities and Exploits CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which statement best defines a vulnerability in the context of cybersecurity?

   • AAn action taken by a threat actor to breach a system's security
   • BA security measure implemented to protect a system from attacks
   • CA weakness in a system, network, or application that can be exploited by a threat actor
   • DA piece of code or tool that takes advantage of a weakness to compromise a system
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A software vendor's security team discovers a critical flaw in their web application that could allow an attacker to execute arbitrary code. They immediately develop and release a patch to all customers. However, before the patch is widely deployed, a threat actor begins exploiting the flaw in the wild. Which stage of the vulnerability lifecycle does this scenario primarily illustrate?

   • AThe vulnerability is a zero-day because the patch has not been applied everywhere.
   • BThe vulnerability is a misconfiguration because the patch was not deployed quickly.
   • CDiscovery and disclosure, followed by exploitation before patching is complete.
   • DThe exploitation is a client-side attack because it targets the web application.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the correct sequence of the vulnerability lifecycle?

   • ADiscovery, disclosure, patching, exploitation
   • BPatching, discovery, disclosure, exploitation
   • CExploitation, discovery, patching, disclosure
   • DDisclosure, discovery, exploitation, patching
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which category of exploit is launched by an attacker over a network without requiring any prior access to the target system?

   • AClient-side exploit
   • BDenial-of-service exploit
   • CLocal exploit
   • DRemote exploit
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A system administrator is reviewing the security of a web server. They find that the server is running with default credentials enabled, and the firewall rules are overly permissive, allowing unnecessary ports to be exposed. Which type of vulnerability is this, and what is the most likely exploit?

   • AA misconfiguration, exploited by using default credentials or accessing exposed services.
   • BA buffer overflow, exploited by sending a long string.
   • CA cross-site scripting (XSS) flaw, exploited by injecting a script.
   • DAn SQL injection, exploited by a crafted query.
   Reveal Solution Discussion Select an answer first