Application Attacks

What is the primary characteristic of a code injection attack?

• Overwriting a buffer of memory.

• Gaining higher-level access to a system.

• Adding malicious information into a data stream.

• Replaying captured network data to a server.

Which type of application attack involves adding more information to a variable than it can hold, causing data to spill into adjacent memory areas?

• Replay attack

• Code injection

• Privilege escalation

• Buffer overflow

What is required for an attacker to perform a replay attack?

• Physical access to the server.

• Access to raw network data.

• Knowledge of the application's source code.

• Administrator privileges on the target system.

What is the main objective of a privilege escalation attack?

• To flood a system with excessive traffic.

• To gain higher-level access to a system.

• To encrypt a user's files for ransom.

• To trick users into revealing sensitive information.

What is a characteristic of most cross-site requests?

• They require explicit user authentication for each request.

• They are typically unauthenticated requests.

• They are rare and usually indicate malicious activity.

• They only load content from the primary domain visited.

Which type of code is primarily responsible for rendering the visual elements of a web page on the user's screen?

• Server-side code

• Database code

• Client-side code

• Network protocol code

A Cross-Site Request Forgery (CSRF) attack primarily exploits which vulnerability?

• The ability to directly modify server-side code.

• The web application's trust in the user's browser after authentication.

• Weak encryption protocols used for data transmission.

• The absence of proper input validation on web forms.

What is the primary objective of a directory traversal attack?

• To execute arbitrary code on the web server.

• To gain unauthorized access to files and directories outside the web server's intended root.

• To flood the web server with traffic, causing a denial of service.

• To steal user credentials from the web application's database.