CCP Vulnerability Assessment & Penetration Testing 2

Question 1

What is a 'false positive' in vulnerability scanning?

Accepted Answer

A scan result that reports a vulnerability that does not actually exist on the target

Answer

A vulnerability that exists but is not exploitable in the current configuration

Answer

A critical vulnerability that the scanner assigns a low severity score

Answer

An exploit attempt that fails due to network filtering

Question 2

Which phase of penetration testing involves using tools like Shodan, WHOIS, and LinkedIn to collect target information before active scanning?

Accepted Answer

Reconnaissance

Answer

Exploitation

Answer

Post-exploitation

Answer

Reporting

Question 3

A SQL injection attack works by:

Accepted Answer

Injecting malicious SQL queries into user-supplied input fields to manipulate a backend database

Answer

Intercepting SQL traffic between a client and database server and replaying it

Answer

Exploiting misconfigured database ports to gain direct network access

Answer

Using SQL commands embedded in phishing emails to harvest credentials

Question 4

What is the purpose of the CVE (Common Vulnerabilities and Exposures) system?

Accepted Answer

To provide a publicly available catalog of known cybersecurity vulnerabilities with unique identifiers

Answer

To provide a standardized scoring system for rating vulnerability severity

Answer

To track active exploitation of vulnerabilities in the wild

Answer

To certify penetration testers who discover new vulnerabilities

Question 5

What does 'privilege escalation' mean in the context of penetration testing?

Accepted Answer

Gaining higher-level permissions on a system than those initially obtained during exploitation

Answer

Obtaining administrative access to a vulnerability scanner

Answer

Moving from a compromised host to adjacent systems on the network

Answer

Increasing the scan depth of an automated vulnerability assessment

Question 6

Which web application penetration testing tool acts as an intercepting proxy, allowing testers to inspect and modify HTTP/HTTPS traffic between a browser and a web server?

Accepted Answer

Burp Suite

Answer

Nmap

Answer

Nessus

Answer

Aircrack-ng

Question 7

A buffer overflow vulnerability occurs when:

Accepted Answer

A program writes more data to a buffer than it was allocated, potentially overwriting adjacent memory and allowing code execution

Answer

A web application fails to encrypt data stored in memory buffers

Answer

An attacker floods a network buffer to cause packet loss and denial of service

Answer

A database buffer fills up and begins logging queries to an insecure location