Cyber Security Ethical Hacking and Penetration Testing 2

Question 1

What is SQL injection?

Accepted Answer

Injecting malicious SQL code into input fields to manipulate database queries

Answer

SQL injection inserts malicious SQL statements into user input fields to manipulate backend database queries.

Question 2

What is cross-site scripting (XSS)?

Accepted Answer

Injecting malicious scripts into web pages viewed by other users

Answer

XSS injects malicious client-side scripts into web pages, allowing attackers to steal cookies or redirect users.

Question 3

What does a CVE (Common Vulnerabilities and Exposures) number identify?

Accepted Answer

A publicly known cybersecurity vulnerability with a unique identifier

Answer

CVE numbers are unique identifiers assigned to publicly disclosed cybersecurity vulnerabilities.

Question 4

Which Metasploit module type is used to take advantage of a vulnerability to gain access to a target?

Accepted Answer

Exploit

Answer

Exploit modules in Metasploit contain the code to take advantage of specific vulnerabilities on target systems.

Question 5

What is the purpose of a payload in exploitation?

Accepted Answer

Execute code on the target after a vulnerability is exploited

Answer

A payload is code delivered to the target after exploitation to perform actions such as opening a remote shell.

Cyber Security Practice Test