Cyber Security Ethical Hacking and Penetration Testing 3

Question 1

What is a CVSS score used for in vulnerability management?

Accepted Answer

Measuring the severity of a vulnerability on a standardized scale

Answer

CVSS (Common Vulnerability Scoring System) provides a standardized numeric severity score from 0 to 10.

Question 2

What does social engineering exploit in a security context?

Accepted Answer

Human psychology to manipulate individuals into revealing information or taking actions

Answer

Social engineering manipulates people rather than systems, exploiting trust, urgency, or fear to obtain sensitive information.

Question 3

Which type of XSS attack stores the malicious script on the server so it affects all users who view the page?

Accepted Answer

Stored (persistent) XSS

Answer

Stored XSS persists the malicious script in the server's database, delivering it to every user who views the affected page.

Question 4

What is the purpose of fuzzing in security testing?

Accepted Answer

Sending random or malformed input to applications to find crashes or vulnerabilities

Answer

Fuzzing sends unexpected or random data to applications to uncover crashes, memory corruption, and input validation flaws.

Question 5

What is a zero-day vulnerability?

Accepted Answer

A vulnerability that is unknown to the vendor with no available patch

Answer

A zero-day is a vulnerability unknown to the vendor, meaning no patch exists and systems are immediately at risk.

Cyber Security Practice Test