WorksheetsApplication Attack Indicators
Total questions: 10
Worksheet time: 5mins
When an attacker captures network traffic and retransmits it at a later time, what type of attack are they attempting?
Denial-of-service attack
Replay attack
Bluejacking attack
What type of attack involves an attacker putting a layer of code between an original device driver and the operating system?
Refactoring
Trojan horse
Shimming
Pass the hash
You’re reviewing a custom web application and accidentally type a number in a text field. The application returns an error message containing variable names, filenames, and the full path of the application. This is an example of which of the following?
Resource exhaustion
Improper error handling
Generic error message
Common misconfiguration
You’re working with a group testing a new application. You’ve noticed that when three or more of you click Submit on a specific form at the same time, the application crashes every time. This is most likely an example of which of the following?
A race condition
A nondeterministic error
An undocumented feature
A DLL injection
An externally facing web server in your organization keeps crashing. Looking at the server after a reboot, you notice CPU usage is pegged and memory usage is rapidly climbing. The traffic logs show a massive amount of incoming HTTP and HTTPS requests to the server. Which type of attack is this web server experiencing?
Input validation
Distributed error handling
Resource exhaustion
Race condition
our organization is considering using a new ticket identifier with your current help desk system. The new identifier would be a 16-digit integer created by combining the date, time, and operator ID. Unfortunately, when you’ve tried using the new identifier in the “ticket number” field on your current system, the application crashes every time. The old method of using a five-digit integer works just fine. This is most likely an example of which of the following?
Common misconfiguration
Zero-day vulnerability
Memory leak
Integer overflow
While examining a laptop infected with malware, you notice the malware loads on startup and also loads a file called netutilities.dll each time Microsoft Word is opened. This is an example of which of the following?
Race condition
DLL injection
System infection
Memory overflow
A web application you are reviewing has an input field for username and indicates the username should be between 6 and 12 characters. You’ve discovered that if you input a username that’s 150 characters or more in length, the application crashes. What is this is an example of?
Memory leak
Buffer overflow
Directory traversal
Integer overflow
Your organization is having issues with a custom web application. The application seems to run fine for a while but starts to lock up or crash after seven to ten days of continuous use. Examining the server, you notice that memory usage seems to climb every day until the server runs out of memory. The application is most likely suffering from which of the following?
Memory leak
Overflow leak
Zero-day exploit
Pointer dereference
our database server is returning a large dataset to an online user, saturating the network. The normal return of records would be a couple at most. This is an example of what form of attack?
Memory leak
LDAP injection
Man in the middle
SQL injection
