CCP Vulnerability Assessment & Penetration Testing 3

Question 1

What is 'fuzzing' in the context of vulnerability testing?

Accepted Answer

Sending large volumes of random, malformed, or unexpected inputs to a target application to discover crashes or unexpected behavior

Answer

Fuzzing (or fuzz testing) automatically submits random, invalid, or unexpected input data to an application to uncover crashes, exceptions, or security vulnerabilities such as buffer overflows and injection flaws.

Question 2

What is the key characteristic of a 'grey-box' penetration test?

Accepted Answer

The tester has partial knowledge, such as network diagrams or low-privilege credentials, simulating an insider threat

Answer

A grey-box penetration test provides the tester with partial information about the target environment — such as network topology, user-level credentials, or application documentation — simulating a partially informed attacker or insider threat.

Question 3

According to the Penetration Testing Execution Standard (PTES), which phase involves maintaining access and establishing a persistent presence on a compromised system?

Accepted Answer

Post-exploitation

Answer

The post-exploitation phase in PTES involves maintaining persistent access, escalating privileges, pivoting to other systems, and collecting evidence to demonstrate the full business impact of a successful compromise.

Question 4

Which type of Cross-Site Scripting (XSS) attack stores malicious script in the target server's database and serves it to all users who view the affected page?

Accepted Answer

Stored (Persistent) XSS

Answer

Stored (persistent) XSS embeds malicious script into a server-side data store (e.g., a database or comment field), where it is permanently served to any user who loads the affected page, making it more dangerous than reflected XSS.

Question 5

What is the primary advantage of an authenticated vulnerability scan over an unauthenticated scan?

Accepted Answer

Authenticated scans can detect vulnerabilities inside the system, such as missing patches and misconfigurations, resulting in fewer false positives and more complete results

Answer

Authenticated scans log into target systems with credentials, allowing the scanner to inspect installed software versions, patch levels, and configuration settings from the inside, producing more accurate and comprehensive results than unauthenticated network-only scans.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP Vulnerability Assessment & Penetration Testing 3