NEW
Font size
WorksheetsSEC+ Ch.7 Review Test
Total questions: 15
Worksheet time: 9mins
An IDS has sent multiple alerts in response to increased traffic. Upon investigation, you realize it is due to a spike in network traffic from several sources. Assuming this is malicious, which of the following is the MOST likely explanation?
An ARP poisoning attack
A DNS poisoning attack
A domain hijacking attack
A DDoS attack
While investigating performance issues on a web server, you verified that the CPU usage was about 10 percent five minutes ago. However, it now shows that CPU usage has been averaging over 98 percent for the last two minutes. Which of the following BEST describes what this web server is experiencing?
Resource exhaustion
DDoS
A buffer overflow attack
A memory leak
An administrator regularly connects to a server using SSH without anyproblems. Today, he sees a message similar to the following graphic when he connects to the server.
Which of the following is the MOST likely reason for this message?
Rogue access point
On-path attack
MAC flooding
ARP poisoning
Homer complains that his system started acting erratically today. You discover that malware infected his system, but you discover he didn’t open any email during the day. He mentions that he has been browsing the Internet all day. Which of the following could you check to see where the malware MOST likely originated?
Web server logs
Mail server logs
PowerShell logs
DNS server logs
While reviewing logs for a web application, a security analyst notices that it has crashed several times, reporting a memory error. Shortly after it crashes, the logs show malicious code that isn’t part of a known application.
Which of the following is MOST likely occurring?
Buffer overflow
ARP poisoning
Privilege escalation
Replay
Web developers are implementing error handling in a database application accessed by a web server. Which of the following would be the BEST way to implement this?
Display a detailed error message but log generic information on the error
Display a generic error message but log detailed information on the error
Display a generic error message and log generic information on the error
Display a detailed error message and log detailed information on the error
A web developer is adding input validation techniques to a website application. Which of the following should the developer implement during this process?
Validation on the server-side
Validation on the client-side
Normalization techniques
Memory management techniques
Developers in the YCDA organization have created an application that users can download and install on their computers. Management wants to provide users with a reliable method of verifying that the application has not been modified after YCDA released it. Which of the following methods provides the BEST solution?
Code signing
Input validation
Obfuscation
Stored procedures
Your organization is preparing to deploy a web-based application, which will accept user input. Which of the following will BEST test the reliability of this application to maintain availability and data integrity?
Static code analysis
Input validation
Error handling
Dynamic code analysis
Several developers in your organization are working on a software development project. Recently, Bart made an unauthorized change to the code that effectively broke several modules. Unfortunately, there isn’t any record of who made the change or details of the change. Management wants to ensure it is easy to identify who makes any changes in the future. Which of the following provides the BEST solution for this need?
Dynamic code analysis
Version control
Static code analysis
Use of third-party SDKs
Database administrators have created a database used by a web application. However, testing shows that application queries against the database take a significant amount of time. Which of the following actions is MOST likely to improve the overall performance of the database?
Normalization
Client-side input validation
Server-side input validation
Obfuscation
Looking at logs for an online web application, you see that someone has entered the following phrase into several queries: ’ or ‘1’=’1’; --
Which of the following provides the BEST protection against this attack?
Normalization
Proper error handling
Removing dead code
Stored procedures
You are examining logs generated by an online web application. You notice that the following phrase is appearing in several queries ’ or ‘1’=‘1’; --
Which of the following is the MOST likely explanation for this?
A buffer overflow attack
A DLL injection attack
A SQL injection attack
A race condition
Your organization has created a web application that will go live after testing is complete. An application tester sees the following URL: https://gcgapremium.com/info.php?sessionID=10123&acct=homer. The tester resends the following URL to the website:
https://gcgapremium.com/info.php?sessionID=32101&acct=homer.
Which of the following attacks is the tester checking?
Pass the hash
Buffer overflow
Cross-site request forgery
Race condition
Your SIEM sent an alert after detecting the following script was run ona system within your network.
invoke-command {
$a = net localgroup administrators |
where {$_ -AND $_ -notmatch "command completed"} | select -skip 4 }
What BEST describes this script?
A Python script to list local administrators
A script used to create a logic bomb
A PowerShell script to list local administrators
A script used to create a backdoor
