Application Attack Indicators

When an attacker captures network traffic and retransmits it at a later time, what type of attack are they attempting?

• Denial-of-service attack

• Replay attack

• Bluejacking attack

What type of attack involves an attacker putting a layer of code between an original device driver and the operating system?

• Refactoring

• Trojan horse

• Shimming

• Pass the hash

You’re reviewing a custom web application and accidentally type a number in a text field. The application returns an error message containing variable names, filenames, and the full path of the application. This is an example of which of the following?

• Resource exhaustion

• Improper error handling

• Generic error message

• Common misconfiguration

You’re working with a group testing a new application. You’ve noticed that when three or more of you click Submit on a specific form at the same time, the application crashes every time. This is most likely an example of which of the following?

• A race condition

• A nondeterministic error

• An undocumented feature

• A DLL injection

An externally facing web server in your organization keeps crashing. Looking at the server after a reboot, you notice CPU usage is pegged and memory usage is rapidly climbing. The traffic logs show a massive amount of incoming HTTP and HTTPS requests to the server. Which type of attack is this web server experiencing?

• Input validation

• Distributed error handling

• Resource exhaustion

• Race condition

our organization is considering using a new ticket identifier with your current help desk system. The new identifier would be a 16-digit integer created by combining the date, time, and operator ID. Unfortunately, when you’ve tried using the new identifier in the “ticket number” field on your current system, the application crashes every time. The old method of using a five-digit integer works just fine. This is most likely an example of which of the following?

• Common misconfiguration

• Zero-day vulnerability

• Memory leak

• Integer overflow

While examining a laptop infected with malware, you notice the malware loads on startup and also loads a file called netutilities.dll each time Microsoft Word is opened. This is an example of which of the following?

• Race condition

• DLL injection

• System infection

• Memory overflow

A web application you are reviewing has an input field for username and indicates the username should be between 6 and 12 characters. You’ve discovered that if you input a username that’s 150 characters or more in length, the application crashes. What is this is an example of?

• Memory leak

• Buffer overflow

• Directory traversal

• Integer overflow

Your organization is having issues with a custom web application. The application seems to run fine for a while but starts to lock up or crash after seven to ten days of continuous use. Examining the server, you notice that memory usage seems to climb every day until the server runs out of memory. The application is most likely suffering from which of the following?

• Memory leak

• Overflow leak

• Zero-day exploit

• Pointer dereference

our database server is returning a large dataset to an online user, saturating the network. The normal return of records would be a couple at most. This is an example of what form of attack?

• Memory leak

• LDAP injection

• Man in the middle

• SQL injection