SE Vulnerability Assessment and Penetration Testing 2

Question 1

During a web application penetration test, a tester sends `' OR '1'='1` in a login field and successfully bypasses authentication. What vulnerability is present?

Accepted Answer

SQL injection

Answer

The input manipulates an SQL query's logic to return true for all records, bypassing the intended authentication check via SQL injection.

Question 2

What is a false positive in the context of vulnerability scanning?

Accepted Answer

A reported vulnerability that does not actually exist in the target

Answer

A false positive occurs when a scanner reports a vulnerability that, upon manual verification, does not actually exist or is not exploitable.

Question 3

Which reconnaissance technique gathers information about a target using publicly available sources without directly interacting with the target's systems?

Accepted Answer

OSINT (Open Source Intelligence)

Answer

OSINT collects information from public sources such as WHOIS, social media, job postings, and DNS records without touching the target's infrastructure.

Question 4

A penetration tester establishes persistence on a compromised host and then moves to other internal systems. What phase does the lateral movement represent?

Accepted Answer

Post-exploitation / lateral movement

Answer

Lateral movement occurs during post-exploitation when an attacker pivots from an initial foothold to additional internal systems.

Question 5

Which framework maps adversary tactics, techniques, and procedures (TTPs) and is widely used to guide penetration testing scenarios?

Accepted Answer

MITRE ATT&CK

Answer

MITRE ATT&CK is a knowledge base of real-world adversary TTPs organized by tactic, used to model and test against realistic attack scenarios.

SE - Security Engineer Practice Test

SE - Security Engineer Practice Test

SE Vulnerability Assessment and Penetration Testing 2