CompTIA Security+ SY0-701 Practice Test 8 By Mr. B

Front

Which of the answers listed below refers to a security vulnerability that enables inserting malicious code into input fields, such as search bars or login forms, to execute unauthorized commands on a database? Options: RCE, SQLi, XSS, CSRF

Back

SQLi

Answer explanation

SQLi, or SQL Injection, is a security vulnerability that allows attackers to insert malicious SQL code into input fields, enabling them to execute unauthorized commands on a database. This makes SQLi the correct answer.

Front

Which of the following indicates an SQL injection attack attempt? DELETE FROM itemDB WHERE itemID = '1';, SELECT * FROM users WHERE userName = 'Alice' AND password = '' OR '1' = '1';, DROP TABLE itemDB;, SELECT * FROM users WHERE email = '[e-mail]' AND password = '';

Back

SELECT * FROM users WHERE userName = 'Alice' AND password = '' OR '1' = '1';

Answer explanation

The correct choice indicates an SQL injection attempt by using 'OR '1' = '1'', which can bypass authentication. This technique exploits vulnerabilities in SQL queries to manipulate database access.

Front

Which of the following answers refers to a type of software embedded into a hardware chip? Firmware, Middleware, Device driver, Machine code

Back

Firmware

Answer explanation

Firmware is a type of software specifically designed to be embedded into hardware chips, providing low-level control for the device. Unlike middleware or device drivers, firmware operates closely with the hardware.

Front

Which term refers to a situation in which a product or service may no longer receive security patches or other updates, making it more vulnerable to attack? Options: EOL, ALM, EOS, SDLC

Back

EOL

Answer explanation

EOL stands for 'End of Life', indicating that a product or service will no longer receive updates or security patches, increasing its vulnerability to attacks. This makes EOL the correct choice for the question.

Front

What is the main vulnerability related to legacy hardware?

Back

Lack of security updates and patches

Answer explanation

The main vulnerability of legacy hardware is the lack of security updates and patches, making it susceptible to cyber threats. Without regular updates, these systems cannot defend against new vulnerabilities.

Front

Which of the following answers refers to a virtualization-related vulnerability where virtualized assets allocated to one VM are improperly isolated and can be accessed or compromised by another VM? Options: Resource reuse, Privilege escalation, Resource exhaustion, Concurrent session usage

Back

Resource reuse

Answer explanation

Resource reuse refers to a vulnerability in virtualization where resources allocated to one VM can be accessed by another VM due to improper isolation, leading to potential data breaches or compromises.

Front

Which term describes the process of removing software restrictions imposed by Apple on its iOS operating system? Options: Sideloading, Carrier unlocking, Rooting, Jailbreaking

Back

Jailbreaking

Answer explanation

Jailbreaking is the term used to describe the process of removing software restrictions on iOS, allowing users to install unauthorized apps and customize their devices beyond Apple's limitations.

Front

A type of attack aimed at exploiting vulnerability that is present in already released software but unknown to the software developer is known as:

Back

Zero-day attack

Answer explanation

A zero-day attack targets vulnerabilities in software that are unknown to the developers. Since the developers have not yet released a fix, these attacks can be particularly damaging, making 'zero-day attack' the correct choice.

Front

Which type of Trojan enables unauthorized remote access to a compromised system?

Back

RAT

Answer explanation

A RAT (Remote Access Trojan) allows unauthorized remote access to a compromised system, enabling attackers to control it from afar. APT (Advanced Persistent Threat) refers to a broader strategy, while MaaS (Malware as a Service) and PUP (Potentially Unwanted Program) do not specifically provide remote access.

Front

A standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth is referred to as:

Back

Worm

Answer explanation

A worm is a standalone malicious program that self-replicates over networks, consuming system resources and bandwidth. Unlike viruses, worms do not require a host file to spread, making them particularly harmful.