Vulnerability Research and Tools

An example of an exploit is malware.

• True

• False

What does a security researcher usually submit to a vendor as evidence that an attack using a vulnerability in the vendor's software is possible?

• Vulnerability details

• Malware

• Proof-of-concept exploit

Which of the below does NOT belong to the list of metric groups used in CVSS?

• Temporal metric group

• Complexity metric group

• Base metric group

• Environmental metric group

What do you call an exploit if the vulnerability was exploited AFTER a patch was released?

• N-day exploit or attack

• 0-day exploit

• 0-day vulnerability

• Vulnerability

Which of the following are web-based exploitive behaviors?

• Defacing websites

• Domain Name Server (DNS) attacks

• ARP poisoning

• Employing malicious code

_______________ is a type of HTTP exploit that is used by attackers to gain unauthorized access to restricted directories and files.

• Cookie snooping

• Command injection

• Directory traversal

• Log tampering

The diagram shows an example of a(n) __________________ attack.

• buffer overflow

• cross-site request forgery

• SQL injection

• cross-site scripting

Which of the following statements is NOT TRUE about stored XSS?

• Also known as persistent XSS.

• It happens when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way.

• It happens when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.

• It makes use of unsanitized HTML forms.

Which web-based attacks will not be solved by sanitizing user's input into HTML forms?

• Buffer overflow

• SQL injection

• Command injection

• Cross-site scripting

Implementing a 'timeout' value will help mitigate the following web-based attacks EXCEPT:

• cookie hijacking

• DoS

• session hijacking