CCP Vulnerability Assessment & Penetration Testing 3

Question 1

What is 'fuzzing' in the context of vulnerability testing?

Accepted Answer

Sending large volumes of random, malformed, or unexpected inputs to a target application to discover crashes or unexpected behavior

Answer

Obfuscating network packets to evade intrusion detection systems

Answer

Using social engineering to confuse security personnel during a red team assessment

Answer

Blurring sensitive data in screenshots included in penetration testing reports

Question 2

What is the key characteristic of a 'grey-box' penetration test?

Accepted Answer

The tester has partial knowledge, such as network diagrams or low-privilege credentials, simulating an insider threat

Answer

The tester has no prior knowledge of the target environment

Answer

The tester has complete knowledge including source code and architecture diagrams

Answer

The test is conducted by a third-party auditor with no communication with the internal team

Question 3

According to the Penetration Testing Execution Standard (PTES), which phase involves maintaining access and establishing a persistent presence on a compromised system?

Accepted Answer

Post-exploitation

Answer

Reconnaissance

Answer

Vulnerability analysis

Answer

Reporting

Question 4

Which type of Cross-Site Scripting (XSS) attack stores malicious script in the target server's database and serves it to all users who view the affected page?

Accepted Answer

Stored (Persistent) XSS

Answer

Reflected XSS

Answer

DOM-based XSS

Answer

Blind XSS

Question 5

What is the primary advantage of an authenticated vulnerability scan over an unauthenticated scan?

Accepted Answer

Authenticated scans can detect vulnerabilities inside the system, such as missing patches and misconfigurations, resulting in fewer false positives and more complete results

Answer

Authenticated scans are faster because they skip network-level probing

Answer

Authenticated scans eliminate the need for post-scan manual validation

Answer

Authenticated scans are legally required for PCI DSS compliance

Question 6

What defines a zero-day vulnerability?

Accepted Answer

A vulnerability that is unknown to the software vendor and for which no official patch exists

Answer

A vulnerability that has been known for fewer than 24 hours before a patch is released

Answer

A vulnerability that has been publicly disclosed but not yet assigned a CVE number

Answer

A vulnerability rated 10.0 on the CVSS scale

Question 7

What does 'lateral movement' refer to in the context of a penetration test or cyberattack?

Accepted Answer

Moving horizontally across a network from one compromised system to other systems to expand access

Answer

Escalating privileges vertically from standard user to root on a single compromised machine

Answer

Shifting the attack from the network layer to the application layer

Answer

Rotating between multiple command-and-control servers to avoid detection