NEW
Font size
Worksheetssc_2
Total questions: 40
Worksheet time: 20mins
Which HTTP method is primarily vulnerable to parameter tampering?
GET
POST
PUT
HEAD
Stored XSS differs from Reflected XSS because:
It executes faster
It requires user interaction
Payload is stored on server-side
It uses JavaScript only
Which vulnerability occurs when user input directly modifies backend SQL logic?
XSS
CSRF
SQL Injection
Command Injection
Which HTTP header reveals browser and OS details?
Host
Referer
User-Agent
Cookie
Burp Suite’s Repeater is mainly used for:
Automated scanning
Manual request manipulation
Credential brute force
Session hijacking
Which attack abuses trust between browser and server without stealing credentials?
XSS
CSRF
SQL Injection
Clickjacking
Which testing technique analyzes source code without executing it?
DAST
SAST
Fuzzing
Runtime testing
Which vulnerability arises due to improper input validation length?
SQL Injection
XSS
Buffer Overflow
CSRF
Which HTTP response code indicates unauthorized access?
200
302
401
403
Which vulnerability cannot be detected by purely static analysis?
Hardcoded credentials
Logic flaws
Runtime authentication bypass
Insecure functions
Passive footprinting avoids:
DNS queries
WHOIS lookups
Network packets to target
Search engines
Which tool maps organizational exposure without touching target systems?
Nmap
Nessus
Netcraft
Metasploit
Which scan type sends packets without completing TCP handshake?
Connect scan
SYN scan
ACK scan
Window scan
Which scan is used to identify firewall rules?
SYN scan
FIN scan
ACK scan
XMAS scan
An ACK scan primarily determines:
Open ports
Closed ports
Filtered vs unfiltered
Service versions
Which attack targets ARP tables?
DNS Spoofing
IP Spoofing
ARP Poisoning
MAC Flooding
MAC Flooding mainly causes:
ARP poisoning
Switch to behave like hub
IP conflict
Session hijacking
Which protocol is most vulnerable to sniffing?
HTTPS
SSH
FTP
SFTP
Which tool is commonly used for wireless packet sniffing?
Snort
Wireshark
Metasploit
Burp Suite
Which statement about Wireshark is TRUE?
It performs exploitation
It injects packets
It is a passive analyzer
It cracks encryption
A Trojan differs from a worm because:
Trojans self-replicate
Worms need user execution
Trojans disguise as legitimate software
Worms use backdoors
Which Trojan initiates connection from victim to attacker?
Bind shell
Reverse shell
Netcat listener
Backdoor daemon
Which malware hides within legitimate executables?
Worm
Virus
Trojan
Rootkit
Rootkits are most dangerous because they:
Spread quickly
Modify kernel-level components
Consume memory
Use encryption
Which malware type primarily focuses on persistence, not propagation?
Worm
Virus
Rootkit
Bot
IDS differs from IPS because IDS:
Blocks traffic
Modifies packets
Detects and alerts only
Drops connections
Signature-based IDS fails against:
Known attacks
Replayed traffic
Zero-day attacks
Logged events
Honeypots are primarily used to:
Prevent attacks
Delay attackers
Detect attacker behavior
Encrypt data
Which firewall architecture places public servers in isolation?
Dual-homed firewall
Screened host
Screened subnet
Bastion-only
Bastion host is:
Hidden internal server
Hardened exposed system
IDS appliance
Router firewall
Which wireless attack forces clients to disconnect?
Sniffing
Deauthentication
MAC filtering
Rogue AP
Which encryption does WPA2 use?
TKIP
RC4
AES
DES
Which mobile attack abuses user trust via messages?
Phishing
Smishing
Vishing
Spoofing
Android Debug Bridge (ADB) is mainly used for:
Malware execution
Device rooting
App debugging and control
Network scanning
Rooting an Android device mainly affects:
App performance
Kernel access control
UI customization
Network speed
Which risk assessment is qualitative?
OCTAVE
CRAMM
FMEA
ALE
Principle that assumes everything is denied unless allowed:
Least privilege
Defense in depth
Default deny
Separation of duties
Which control detects incidents?
Preventive
Corrective
Detective
Deterrent
Which policy violation involves misuse of granted rights?
Privilege escalation
Abuse of privilege
Authentication bypass
Authorization failure
Which factor is NOT authentication?
Something you know
Something you have
Something you are
Something you access
