CompTIA Security+ Common Vulnerabilities

¡Supera tus tareas y exámenes ahora con Quizwiz!

A situation in which an application writes to an area of memory that it is not supposed to access is referred to as: DLL injection Buffer overflow Memory leak Integer overflow

Buffer overflow

A collection of precompiled functions designed to be used by more than one Microsoft Windows application simultaneously to save system resources is known as: DLL ISO EXE INI

DLL

Which of the terms listed below describes a type of attack that relies on executing a library of code? Memory leak DLL injection Pointer dereference Buffer overflow

DLL injection

A predefined username/password on a brand new wireless router is an example of: Default configuration Misconfiguration Zero-day vulnerability Architecture/design weakness

Default configuration

After feeding an input form field with incorrect data, a hacker gets access to debugger info providing extensive description of the error. This situation is an example of: Fuzz testing Improper input handling Brute-force attack Improper error handling

Improper error handling

A situation in which a web form field accepts data other than expected (e.g. server commands) is an example of: Zero-day vulnerability Improper input validation Default configuration Improper error handling

Improper input validation

Which of the following violates the principle of least privilege? Onboarding process Improperly configured accounts Shared accounts for privileged users Time-of-day restrictions

Improperly configured accounts

Which of the following factors pose the greatest risk for embedded systems? (Select 2 answers) Lack of user training Inadequate vendor support System sprawl Default configurations Improper input handling

Inadequate vendor support

Which of the terms listed below describes a programming error where an application tries to store a numeric value in a variable that is too small to hold it? Buffer overflow Pointer dereference Memory leak Integer overflow

Integer overflow

A situation in which an application fails to properly release memory allocated to it or continually requests more memory than it needs is called: Memory leak Buffer overflow DLL injection Integer overflow

Memory leak

Which of the following terms describes an attempt to read a variable that stores a null value? Integer overflow Pointer dereference Buffer overflow Memory leak

Pointer dereference

A malfunction in preprogrammed sequential access to a shared resource is described as: Race condition Buffer overflow Memory leak Pointer dereference

Race condition

Which of the answers listed below describes the result of a successful DoS attack? Code injection Resource exhaustion Identity theft Privilege escalation

Resource exhaustion

Which of the terms listed below refers to a software that no longer receives continuing support? OEM SDLC EOL SPoF

SDLC

An effective asset management process provides countermeasures against: (Select all that apply) System sprawl Race conditions Undocumented assets Architecture and design weaknesses User errors

System sprawl Undocumented assets Architecture and design weaknesses

In the IT industry, the term "System sprawl" is used to describe one of the aspects of poor asset management process. True False

True

The purpose of a downgrade attack is to make a computer system fall back to a weaker security mode which makes the system more vulnerable to attacks. True False

True

What is the best countermeasure against social engineering? AAA protocols User authentication Strong passwords User education

User education

Zero-day attack exploits: New accounts Patched software Vulnerability that is present in already released software but unknown to the software developer Well known vulnerability

Vulnerability that is present in already released software but unknown to the software developer

An e-commerce store app running on an unpatched web server is an example of: Architecture/design weakness Risk acceptance Vulnerable business process Security through obscurity

Vulnerable business process


Conjuntos de estudio relacionados

Financial Accounting Final Exam (with answer choices)

View Set

Android Application Fundamentals

View Set

Lesson 1 - Introduction to NFIP Claims Review

View Set

Economics Principles and Practices Chapter 1 Section Reviews Sabau

View Set

Ch. 22 Psycho-therapeutic Agents PrepUs

View Set

Accounting 2nd Mid Term Multiple Choice

View Set

PANCE review reproductive system

View Set