cyber (Beta)

Question 1 of 168

1

Define foot printing

Select one of the following:

Find out more about structure of target
Find out individual computers of target
Involves relatively high amount of manual work
Check if target candidates are actual alive and reachable

Explanation

Question 2 of 168

1

Into which classes are instructions grouped

Select one or more of the following:

Load/Store
Loops
Continuation
Comparison
Arithmetic

Explanation

Question 3 of 168

1

Define a verification in reconnaissance

Select one of the following:

Find out more about structure of target
Find out individual computers of target
Involves relatively high amount of manual work
Check if target candidates are actual alive and reachable

Explanation

Question 4 of 168

1

Define a command injection

Select one of the following:

An injection attack wherein an attacker can execute malicious SQL statements
A type of computer security vulnerability typically found in web application
An attack in which the goals is execution of arbitrary commands on the host operating system via a vulnerable application

Explanation

Question 5 of 168

1

Define OWASP

Select one of the following:

Open Web Application Security Program
Open Wide Application Security Program
Open Wide Application Security Project
Open Web Application Security Project

Explanation

Question 6 of 168

1

When command injection is possible

Select one of the following:

User input is either incorrectly filtered for string literal for escape characters embedded in SQL statement or user input is not strongly typed and unexpected executed
An application passes unsafe user supplied data (forms, cookies, HTTP headers and etc.) to a system shell
Relies on Social Engineering in order to trick the victim into executing malicious JavaScript code into their browser

Explanation

Question 7 of 168

1

How does an interpreter work?

Select one or more of the following:

Translate source code into some efficient intermediate representation and immediate executes this
Describes sequences of executable instructions that do not necessarily constitute an executable file
Transforms source code written in a programming language into another computer language
Parse the source code and perfom its behavior directly

Explanation

Question 8 of 168

1

Find an appropriate types of interpreters

Select one or more of the following:

Matlab
Bash
Ruby
Python

Explanation

Question 9 of 168

1

What does register “rip” store?

Select one of the following:

Condition flags
Program counter
Frame pointer
Stack pointer

Explanation

Question 10 of 168

1

Which of the following GDB commands puts breakpoints at the beginning of the program?

Select one of the following:

b N
b +N
b main
into break

Explanation

Question 11 of 168

1

Which of the following GDB commands puts breakpoint N lines down from the current line ?

Select one of the following:

N
fn
+N

Explanation

Question 12 of 168

1

Dissasembling

Select one of the following:

Preservers a symbol table entity
The process of recovering assembly from machine code
The process of deallocating arguments on the stack
All of the above

Explanation

Question 13 of 168

1

Callee:

Select one of the following:

all of the above
procedure invoked by another function
code that invokes a procedure
deallocates arguments on stack after return

Explanation

Question 14 of 168

1

Caller:

Select one of the following:

registers that must not be clobbered
procedure invoked by another function
code that invokes a procedure
none of the above

Explanation

Question 15 of 168

1

Give the description of Mem(rsp)?Succ(rip)

Select one of the following:

store successor
pop successor into rip
jump to address
jump to successor

Explanation

Question 16 of 168

1

Distinction between jumps and calls

Select one of the following:

there is no destinction between jumps and calls
jumps simply transfer control with no side effects, calls used to implement procedures
jumps used to implement procedures, calls simply transfer control with side effects
jumps simply transfer control with side effects, calls used to implement transfers

Explanation

Question 17 of 168

1

Distinction between direct and indirect transfers

Select one of the following:

direct transfers use relative offsets, indirect transfers are absolute
direct transfers are absolute, indirect transfers use relative offsets
direct transfers use fixed offsets, indirect transfers are not absolute
direct transfers are not absolute, indirect transfers use fixed offsets

Explanation

Question 18 of 168

1

Standards (calling conventions) exist for:

Select one of the following:

none of the above
specify the caller and callee’s responsibilities
all of the above
specify where arguments are passed (registers, stack)

Explanation

Question 19 of 168

1

Select all possible ways to protect the stack

Select one or more of the following:

stack canaries
memory safe languages, such as Java, C#
using strcpy instead of stcncpy
address space layout randomization
non-executable flag

Explanation

Question 20 of 168

1

What are requirements of stack canaries (i.e. cookies)?

Select one or more of the following:

Large domain
Small domain
Randomness
Replicativeness

Explanation

Question 21 of 168

1

Which one of the following is true abot UID key?

Select one or more of the following:

Derived from user passcode
Prevents offline attacks
Can only be used while the phone is running
Ensures passcode key is unique for different devices even if passcode is the same

Explanation

Question 22 of 168

1

What of the following is false for provisioning?

Select one of the following:

Device allows apps signed by owner’s key to run according to the installed profile
Apple signs a provisioning profile that references developer certs
Users install provisioning profile
Apple signs certificates provided by developers

Explanation

Question 23 of 168

1

Which of the following refers to Android components?

Select one or more of the following:

ContentProvider
Activity
Service
BroadcastReceiver

Explanation

Question 24 of 168

1

How many Android malware categories are represented?

Select one of the following:

2
3
4
5
6

Explanation

Question 25 of 168

1

Which of the following is right about mobile devices challenges?

Select one or more of the following:

Limited user input capabilities
Mobile devices are at lower risk of confidentiality breachesv
Difficult to perform pre-boot authentication
Difficult to lose or steal a phone than a desktop

Explanation

Question 26 of 168

1

Define PBKDF2

Select one of the following:

Password-Based Key Demonstration Function
Password-Based Key Derivation Function
Password-Based Key Derivation Formula
Password-Based Key DemonstrationFunction (реально там так)

Explanation

Question 27 of 168

1

What are the challenges that mobile devices present?

Select one of the following:

Unlimited user input capabilities
Difficult to perform pre-boot authentication
Uses touch-screen instead of keyboards

Explanation

Question 28 of 168

1

Select all of iOS Data Protection classes

Select one or more of the following:

File is protected, only accessible when device unlocked
File is not protected
File is protected, accessible after device unlocked
File is protected until user passcode entered

Explanation

Question 29 of 168

1

Select all libc’s unsafe function that was removed in bionic.

Select one or more of the following:

strcpy
strncpy
gets
strcat

Explanation

Question 30 of 168

1

When code signature of capabilities is validated in iOS?

Select one of the following:

during kill
during installation
during start up
at run time

Explanation

Question 31 of 168

1

Why do we carry about Web Applications Security? Choose all that apply.

Select one or more of the following:

Logs can be easily deleted
Widely deployed
Easy to detect
No encryption used

Explanation

Question 32 of 168

1

OWASP is community dedicated to enabling organizations to maintain applications that can be trusted and stands for:

Select one of the following:

Open Web Application Security Project
Online Web Application Security Project
Online Web Application Security Principles
Open Web Application Security Principles
Open Web Application Standards Project

Explanation

Question 33 of 168

1

Application authentication functions are often not implemented correctly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other users’ identities.

Select one of the following:

Injection
Cross-Site Request Forgery (CSRF)
Using Components with Known Vulnerabilities
Cross-Site Scripting (XSS)
Broken Authentication and Session Management

Explanation

Question 34 of 168

1

This attack occurs when a developer exposes a reference to an internal implementation object, such as a file, directory, or database key.

Select one of the following:

Sensitive Data Exposure
Insecure Direct Object References
Unvalidated Redirects and Forwards
Injection
Missing Function Level Access Control

Explanation

Question 35 of 168

1

If a vulnerable library, framework, or any other software is exploited, such an attack can facilitate serious data loss or server takeover.

Select one of the following:

Sensitive Data Exposure
Using Components with known vulnerabilities
Unvalidated Redirects and Forwards
Missing Function Level Access Control
Insecure Direct Object References

Explanation

Question 36 of 168

1

Assume that your Web application stores information about many bank accounts. Which threat is your application vulnerable to if you can manipulate the URL of an account page to access all accounts?

Select one of the following:

Insecure Direct Object Reference
Cross-site scripting
Cross-Site Request Forgery
Injection
Unvalidated Redirects and Forwards

Explanation

Question 37 of 168

1

Which of the following input sources can be directly controlled by a malicious user?

Select one of the following:

GET/POST parameters
Window.location
Server code
Server configuration files
Ports

Explanation

Question 38 of 168

1

What should you do before passing credentials over the network?

Select one of the following:

Use Secure Socket Layer Connection
Replace the credentials with a cryptographic salt and hash
Share the credentials with the client
Accept session IDs from URLs
Use persistent cookies to manage session IDs

Explanation

Question 39 of 168

1

What is an interpreter?

Select one of the following:

a computer program that compiles executions, instructions
a computer program that directly executes, i.e. performs, instructions written in a human language, without previously compiling them into a machine language program
a computer program that directly executes, performs, instructions written in a programming or scripting language, without previously compiling them into a machine language program
a computer program that directly executes, performs, instructions written in a programming or scripting language after compiling them into a machine language program

Explanation

Question 40 of 168

1

Reconnaissance methods are

Select one or more of the following:

Intelligence gathering
Finger printing
Verification
Banner grabbing

Explanation

Question 41 of 168

1

Which phase of reconnaissance is important so that if you make mistake in this phase you may never find vulnerable part of system

Select one of the following:

Intelligence Gathering
Fingerprinting
Banner grabbing
Verification
Footprinting

Explanation

Question 42 of 168

1

It is known that core principle of port scanning is : send packet and then check the response During SYN scan what response implies that port is open

Select one or more of the following:

ACK
SYN
RST

Explanation

Question 43 of 168

1

Many eCommerce businesses utilize third party payment provides to store credit card information for recurring billing. This offloads the burden of keeping credit card numbers safe. It correspond to the following rule:

Select one of the following:

Use strong approved Authenticated Encryption
Only store sensitive data that you need
Follow applicable regulation on use of cryptography
Ensure that any secret key is protected from unauthorized access

Explanation

Question 44 of 168

1

How to prevent “Sensitive Data Exposure”

Select one of the following:

Enable caching for pages that contain sensitive data
Restrict character set used for password
Enable autocomplete on forms collecting sensitive data
Don’t store sensitive data unnecessarily

Explanation

Question 45 of 168

1

Storage encryption should add additional layer of protection that will continue protecting the data even if an attacker subverts the database access control layer . It corresponds to the following rule

Select one of the following:

Ensure that any secret key is protected from unauthorized access
Follow applicable regulation on use of cryptography
Ensure that the cryptographic protection remains secaure even if access control fail
Use strong approved Authenticated Encryption

Explanation

Question 46 of 168

1

What is defined by key lifecycle?

Select one of the following:

The lifecycle will specify when data must be rekeyed
The lifecycle will specify when a key should no longer be use for decryption
The lifecycle will specify when a key should no longer be use for encryption
All of them

Explanation

Question 47 of 168

1

A site simply doesn’t use SSL for all authenticated pages. Attacker simply monitor network traffic (like an open wireless network) and steals the user’s session cookie. Attacker then replays this cookie and hijacks the user’s session, accessing the user private data. This scenario of attack belongs to

Select one of the following:

Injection
Cross-Site Request Forgery CSRF
Sensitive Data Exposure
Cross Site Scripting XSS

Explanation

Question 48 of 168

1

The password database uses unsalted hashes to store everyone’s password. A file upload flaw allows an attacker to retrieve the password file. All of the unsalted hashes can be exposed with a rainbow table of precalculated hashes. This scenario of attack belongs to

Select one of the following:

Cross Site Scripting
Injection
Cross-Site Request Forgery
Sensitive Data Exposure

Explanation

Question 49 of 168

1

Web application is vulnerable to ‘Sensetive Data Exposure ’ if:

Select one of the following:

Proper key management or rotation missing
All of them
Browser security directives or headers missing when sensitive data is provided by /sent to the browser
Sensitive data transmitted in clear text, internally or externally

Explanation

Question 50 of 168

1

Which statements are the part of DML in SQL?

Select one or more of the following:

DELETE
INSERT
SELECT
CREATE
DROPE

Explanation

Question 51 of 168

1

what are the most popular things to attacker can do stack vulnerability ?

Select one or more of the following:

Change the control flow of the program
Report the bag to a developer of the program
Overflows the stack to throw segmentation fault
Rewrite the program variable values
Inject a new functionality to the program

Explanation

Question 52 of 168

1

Low level languages like C/C++ are no memory-safe .Which of the following statements is true: Programmers can directly manipulate pointers Memory accesses are not bounds-checked for validity

Select one of the following:

none of them
both of them
only 2
only 1

Explanation

Question 53 of 168

1

What are the potential targets of stack overwrite attack?
User data
Instruction pointers
Frame pointers

Select one of the following:

all of them
only 1 and 3
only 1 and 2

Explanation

Question 54 of 168

1

What are requirements for running payload in the stack ?
Payload should not contain ZEROS
Stack should be non – executable
Playload size should be smaller than buffer size

Select one of the following:

1, 2
1,3
1
all

Explanation

Question 55 of 168

1

What are the potential targets of stack overwrite attack ?

Select one or more of the following:

User data
Instration pointer
Procedure arguments
Frame pointers

Explanation

Question 56 of 168

1

What are requirements for running payload in the stack ?

Select one of the following:

Payload size should be smaller than buffer size
Stack should be non-executable
Payload should use libc library
Payload should not contain ZEROS

Explanation

Question 57 of 168

1

Which of the following does not refer to the OWASP?

Select one of the following:

Unvalidated Redirects and Forwards
Sensitive Data Exposure
Cross – Site Request Forgery
Using Unknown Vulnerable Components

Explanation

Question 58 of 168

1

Which of the following provides API for accessing browser state and frame content?

Select one of the following:

Document Object Model
Structured Query Language
JavaScript Object Notation
ActionScript
JavaScript

Explanation

Question 59 of 168

1

What are the ways insert JavaScript code into HTML page? Select all that apply

Select one or more of the following:

Embedded
Inline
External

Explanation

Question 60 of 168

1

What kind of protection mechanisms exist against XSS attack?

Select one or more of the following:

HttpOnly
Secure Socket Layer (SSL)
Output Sanitization
Firewall
Input Validation

Explanation

Question 61 of 168

1

When and by whom proposed stack cookies?

Select one of the following:

Cowan, 1996
Cowan, 1998
Vaughan, 1998

Explanation

Question 62 of 168

1

Which of the following refers to defenses for memory corruption

Select one or more of the following:

Stack canaries
Safer libc functions
Random canaries
Heap canaries

Explanation

Question 63 of 168

1

Which of the following properties are required in stack cookies?

Select one or more of the following:

Random
Large domain
Sequence
Small domain

Explanation

Question 64 of 168

1

If attackers cannot inject an executable exploit payload, what does one do?

Select one or more of the following:

Jump-oriented programming
Return-oriented programming
Reuse existing code
Return-into-libc

Explanation

Question 65 of 168

1

What is the purpose of using ASLR?

Select one of the following:

Recognize the names of the addresses
Recognize the locations of the addresses
Randomize the locations of the addresses
Randomize the names of the addresses

Explanation

Question 66 of 168

1

Define ASLR

Select one of the following:

Address security layout randomization
Address space layout randomization
Application space layer randomization
Application space layout randomization

Explanation

Question 67 of 168

1

Which of the following is true about ASLR?

Select one or more of the following:

Transparent to safe applications
Very little overhead
Requires program recompilation
Randomizing at process creatin

Explanation

Question 68 of 168

1

Which of the following idea about stack cookies proposed by Cowan?

Select one or more of the following:

Before returning, check the value against the original
Guard sensitive data, including the saved IP, with a copy of a secret value
If there is a difference, assume something bad has happened and terminate
If there is a difference, assume something good has happened and terminate

Explanation

Question 69 of 168

1

Which of the following does not refer to the cryptographic storage rules?

Select one of the following:

Store a one-way and salted value of passwords
Save all your data
Use strong approved Authenticated Encryption
Ensure that any secret key is protected from unauthorized access

Explanation

Question 70 of 168

1

How many types of XSS exist?

Select one of the following:

1
2
3
4

Explanation

Question 71 of 168

1

Which of the following type does not refer to XSS?

Select one of the following:

Reflected
Stored
MOM based
DOM based

Explanation

Question 72 of 168

1

Define reflected XSS

Select one of the following:

Attacker submits malicious code to server
Code included in page rendered by visiting link
Victim accesses page that includes stored, injected code
App (server-side) persists code

Explanation

Question 73 of 168

1

Which of the following is false about stored XSS?

Select one of the following:

Attacker submits malicious code to server
Code included in page rendered by visiting link
Victim accesses page that includes stored, injected code
App (server-side) persists code

Explanation

Question 74 of 168

1

Which of the following does not refer to protection against XSS attacks?

Select one of the following:

Procedure integrity
Output Sanitization
XSS Filter
HTTP Only

Explanation

Question 75 of 168

1

How many classes exist in document integrity

Select one of the following:

1
2
3
4

Explanation

Question 76 of 168

1

A direct object reference occurs when a developer exposes a reference to

Select one or more of the following:

Internal implementation object
File
Directory
Database key

Explanation

Question 77 of 168

1

Even “secure” websites that use SSL just accept the requests that arrive through the encrypted tunnel without security

Select one of the following:

True
False

Explanation

Question 78 of 168

1

If the parameters are under control of the user and are not properly sanitized, the user can inject its own commands in the interpreter

Select one of the following:

True
False

Explanation

Question 79 of 168

1

Injection flaws occur when an application send trusted data to an interpreter

Select one of the following:

True
False

Explanation

Question 80 of 168

1

A direct object reference occurs when a developer exposes a reference to an internal implementation object, such as a file, directory, or database key

Select one of the following:

True
False

Explanation

Question 81 of 168

1

Injection flaws occur when an application send untrusted data to an interpreter

Select one of the following:

True
False

Explanation

Question 82 of 168

1

Injection flaws occur when an application send untrusted data to an compiler

Select one of the following:

True
False

Explanation

Question 83 of 168

1

Is the following statement true about Insecure Direct Object Reference “With an access control check or other protection, attackers can manipulate these references to access unauthorized data.”

Select one of the following:

True
False

Explanation

Question 84 of 168

1

Is the given statement true about Missing Function Level Access Control “Applications need to perform the same access control checks on the server when each function is accessed”

Select one of the following:

True
False

Explanation

Question 85 of 168

1

Stack grows downwards. Stack is data segment for function-local data, dynamic data and text data.

Select one of the following:

True
False

Explanation

Question 86 of 168

1

Memory can distinguish between different types of variable by using flags

Select one of the following:

True
False

Explanation

Question 87 of 168

1

Compilers translate code from a higher level to a lower level

Select one of the following:

True
False

Explanation

Question 88 of 168

1

Control transfers change control flow of programs

Select one of the following:

True
False

Explanation

Question 89 of 168

1

Marking the stack with non-executable flag prevents from all types of stack attack

Select one of the following:

True
False

Explanation

Question 90 of 168

1

Protecting stack with canary may leak sensitive information

Select one of the following:

True
False

Explanation

Question 91 of 168

1

Mobile devices are at a lower risk of confidentiality breaches

Select one of the following:

True
False

Explanation

Question 92 of 168

1

Mobile devices present unique challenges

Select one of the following:

True
False

Explanation

Question 93 of 168

1

iOS provides an API for encrypting stored files

Select one of the following:

True
False

Explanation

Question 94 of 168

1

Device ID (UID) in iphone can be used when phone is turned off.

Select one of the following:

True
False

Explanation

Question 95 of 168

1

Brute Force mitigations that are implemented on UI can not be escaped

Select one of the following:

True
False

Explanation

Question 96 of 168

1

It is possible to dynamically sign the code in IOS

Select one of the following:

True
False

Explanation

Question 97 of 168

1

When implementing an authentication or session system, you should ensure that new session IDs are not created at login

Select one of the following:

True
False

Explanation

Question 98 of 168

1

It is possible to run operating system shell command inside web site

Select one of the following:

True
False

Explanation

Question 99 of 168

1

Recursive sweep begins at an address and continues sequentially until the buffer exhausted

Select one of the following:

True
False

Explanation

Question 100 of 168

1

Developers can protect the web application by filtering out malicious input

Select one of the following:

True
False

Explanation

Question 101 of 168

1

Verification phase during reconnaissance involve high amount of manual work

Select one of the following:

True
False

Explanation

Question 102 of 168

1

Zone transfer is about copying original DNS data to different DNS Server

Select one of the following:

True
False

Explanation

Question 103 of 168

1

strcpy() performs no bounds-checking, relying instead on finding a terminating null character in the source string

Select one of the following:

True
False

Explanation

Question 104 of 168

1

If the keys are stored with the data then any compromise of the data will easily compromise the keys as well. Unencrypted keys should never reside on the same machine or cluster as the data.

Select one of the following:

True
False

Explanation

Question 105 of 168

1

SQL DML is used to manipulate with records in tables

Select one of the following:

True
False

Explanation

Question 106 of 168

1

It is possible to protect web application from SQL injection by filtering out single and double quotes

Select one of the following:

True
False

Explanation

Question 107 of 168

1

It is not possible to inject complex SQL statements as a part of an attack, except SELECT statements

Select one of the following:

True
False

Explanation

Question 108 of 168

1

NOP sled is special instruction which tells the OS that the program has payload, and it should directly run it.

Select one of the following:

True
False

Explanation

Question 109 of 168

1

It is not possible to inject new code to the stack

Select one of the following:

True
False

Explanation

Question 110 of 168

1

JavaScript use strongly type primitives to provide basic functionality

Select one of the following:

True
False

Explanation

Question 111 of 168

1

Cross Site Scripting attack is the result of running code from untrusted origin

Select one of the following:

True
False

Explanation

Question 112 of 168

1

Is the given statement true about non – executable data? If the attacker can assume control flow but cannot execute a payload, attacks become more difficult

Select one of the following:

True
False

Explanation

Question 113 of 168

1

Is the following statement true about Instruction Set Randomization? Does not require a large degree of support from underlying layers

Select one of the following:

True
False

Explanation

Question 114 of 168

1

Is the given statement true about XSS “running code from a trusted origin”

Select one of the following:

True
False

Explanation

Question 115 of 168

1

In reflected XSS the code is included as a part of malicious link

Select one of the following:

True
False

Explanation

Question 116 of 168

1

Is the given statement true about HTTPOnly attribute “Specifies that cookie should be exposed via document cookie”?

Select one of the following:

True
False

Explanation

Question 117 of 168

1

Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application

Select one of the following:

True
False

Explanation

Question 118 of 168

1

Intelligence Gathering involves relatively high amount of manual work

Select one of the following:

True
False

Explanation

Question 119 of 168

1

1Which functions are mostly vulnerable to stack overflow attacks

Select one or more of the following:

Strcat()
Strcpy()
Gets()
Scanf()

Explanation

Question 120 of 168

1

What will be result, if we ‘print “a”x300;’ for the given code?

int main(int argc, char ** argv){
char buf[256];
strcpy(buf,argv[1]);
printf(“%s\n”, buf);
return 0;}

Select one of the following:

Error
0
Ax300 times
Ax256 times, 0x44 times

Explanation

Question 121 of 168

1

The consequences of arbitrary code execution

Select one or more of the following:

a. Nothing happens
b. Can obtain administrative privileges
c. Privilege escalation
d. The attacker is able to take control of the execution flow of a program

Explanation

Question 122 of 168

1

What is a buffer

Select one or more of the following:

a. A situation where a running program attempts to write data outside the memory buffer which is not intended to store this data
b. A buffer is simply a contiguous block of computer memory that holds multiple instances of the same data type
c. Portion of the memory allocated for storage programs such as variables
d. The program that wants to overwrite the memory

Explanation

Question 123 of 168

1

Why does stack overflow attack occur?

Select one or more of the following:

a. Programmers can directly manipulate pointers
b. Memory accesses are checked
c. Memory accesses are not bounds-checked for validity
d. Programmers cannot directly manipulate pointers

Explanation

Question 124 of 168

1

When the stack overflow attack is introduced?

Select one of the following:

1970
1980
1989
1978

Explanation

Question 125 of 168

1

Which is not going to be randomized in ASLR

Select one or more of the following:

a. Library
b. Text
c. Heap
d. Stack

Explanation

Question 126 of 168

1

18. Which is going to be randomized in ASLR?

Select one or more of the following:

a. Library
d. Stack
b. Text
c. Heap

Explanation

Question 127 of 168

1

Why the stack canary is the effective of protecting from overflow attack?

Select one or more of the following:

a. Canary stack has to check variables
b. Stack canary might be reused
c. Stack canary is the constant value
d. Canary stack corrupts the executed code, then instruction will have an ability to set to the next

Explanation

Question 128 of 168

1

How many types of attack exist?

Select one or more of the following:

2
3
4
5

Explanation

Question 129 of 168

1

Define an active attack?

Select one or more of the following:

a. The attacker can monitor and can do recognition of the target
b. The Attacker attempts to alter system resources or destroy the data
c. The Attacker attempts to gain information from the system without destroying the information
d. The Attacker can change the data

Explanation

Question 130 of 168

1

Define a passive attack

Select one or more of the following:

a. The Attacker attempts to gain information from the system without destroying the information
b. The Attacker can change the data
d. The Attacker attempts to alter system resources or destroy the data
c. The attacker can monitor and can do recognition of the target

Explanation

Question 131 of 168

1

Which of the following attacks refer to the active attack?

Select one or more of the following:

a. Overflow
DoS
b. Man in the middle attack
c. Eavesdropping

Explanation

Question 132 of 168

1

Which of the following attacks refer to the passive attack?

Select one or more of the following:

a. Idle attack
b. Dos
Overflow
c. Port scanner

Explanation

Question 133 of 168

1

What kind of attack is given? You would like to send some requests to kaspi.kz, here an attacker forwards your request to fake kaspi.kz

Select one of the following:

a. Dos
b. Eavesdropping
Overflow
c. Address spoofing

Explanation

Question 134 of 168

1

What does an ARP Based filtering mean

Select one of the following:

a. Sniffing packets between two hosts on a switched network
b. Filtered packets by IP address
c. Sniffing packets from a user to all hosts
d. Filtered packets by MAC address

Explanation

Question 135 of 168

1

What does Public ARP Based filtering mean?

Select one of the following:

a. Sniffing packets from a user to all hosts
b. Sniffing packets between two hosts on a switched network
c. Filtered packets by IP address
d. Filtered packets by MAC address

Explanation

Question 136 of 168

1

Which of the following attacks refer to the passive attack?*

Select one of the following:

a. Dos
Overflow
Port Scanner
No answer

Explanation

Question 137 of 168

1

What are the most popular things attacker can do after exploiting stack vulnerability

Select one of the following:

a. Change the control flow of the program
c. Report the bug to a developer of the program
d. Overflows the stack to throw segmentation fault

Explanation

Question 138 of 168

1

Which of the following properties are requires in stack cookies?

Select one of the following:

a. No correct answer
b. Small domain
c. Sequence
d. Random

Explanation

Question 139 of 168

1

Which of the following is false about ASLR?

Select one of the following:

a. Requires program recompilation
b. Transparent to safe applications
c. Randomizing at process creation
d. Very little overhead

Explanation

Question 140 of 168

1

Which of the following does not refer to the consequences of arbitrary code execution

Select one of the following:

a. The attacker is able to take control of the execution flow of a program
b. Nothing happens
c. Can obtain administrative privileges
d. Privilege escalation

Explanation

Question 141 of 168

1

What are the most popular things attacker can do after exploiting stack vulnerability?

Select one of the following:

a. Inject a new functionality to the program
b. Overflows the stack to throw segmentation fault
c. No correct answer
d. Report the bug to a developer of the program

Explanation

Question 142 of 168

1

What are the most popular things attacker can do after exploiting stack vulnerability?

Select one or more of the following:

a. Inject a new functionality to the program
b. Overflows the stack to throw segmentation fault
c. No correct answer
d. Report the bug to a developer of the program
e. Rewrite the program variable values

Explanation

Question 143 of 168

1

Which of the following is not a way to protect the stack

Select one of the following:

a. Address Space Layout Randomization
b. Memory safe languages, such as Java, C
c. Using strcpy instead of strncpy
d. Non-executable Flag

Explanation

Question 144 of 168

1

Which of the following idea is false about stack cookies proposed by Cowan?

Select one of the following:

a. Before returning, check the value against the original
b. If there is a difference, assume something bad has happened and terminate
c. Guard sensitive data, including the saved IP, with copy of a secret value
d. If there is a difference, assume something good has happened and terminate

Explanation

Question 145 of 168

1

Disassembling is

Select one of the following:

a. All the above
b. Preserves a symbol table entry
d. The process of deallocating arguments on the stack none of the above
c. The process of recovering assembly from machine code

Explanation

Question 146 of 168

1

Define the given attack type

Username = Emmanuel
Passwords = 1234567, qwertz, asdfgh, abcd, ....
[pet names], [birthdays], [car names], [dictionary]...

Select one of the following:

a. Session spotting
b. Replay attack
c. Brute force
d. Session fixation attack

Explanation

Question 147 of 168

1

What is Normal Brute Force attack?

Select one of the following:

c. For one username attackers test one password
d. For one password attackers test many user names
e. For one username attackers test many passwords
f. All the above mentioned

Explanation

Question 148 of 168

1

Define Reverse Brute Force

Select one of the following:

a. For one password attackers test many user names
b. All the above mentioned
c. For one username attackers test many passwords
d. For one username attackers test one password

Explanation

Question 149 of 168

1

Check OWASP vulnerabilities

Select one or more of the following:

a. Using Know Vulnerable Components
b. Missing Function Level Access Control
c. Security Misconfigurations
d. Password Management

Explanation

Question 150 of 168

1

OWASP is an open community dedicated to enabling organizations to develop, purchase, and maintain applications that can be trusted

Select one of the following:

True
False

Explanation

Question 151 of 168

1

Which of the following is true about the risks of Broken Authentication and Session Management?

Select one or more of the following:

a. Identity
b. Theft
c. None of them
d. Undermine authorization and accountability controls cause privacy violation

Explanation

Question 152 of 168

1

Which of the following is true about footprinting?

Select one or more of the following:

a. Less technical information, but important
b. Involves relatively high amount of manual work
c. Get as many plausible candidates as possible
d. NS (name server) / MX (mail exchange) records

Explanation

Question 153 of 168

1

Reconnaissance may start with just one piece of information

Select one of the following:

True
False

Explanation

Question 154 of 168

1

Which of the following approaches refer to Verification?

Select one or more of the following:

Application Fingerprinting
Ping Sweep
Port Scanning
OS Fingerprinting

Explanation

Question 155 of 168

1

Attacker creates a session on a web site -> Attacker sends this Session ID to the victim -> Targeted Web site receives the request from the victim

Select one of the following:

a. Brute Force Attack
b. Session Fixation Attack
c. Session Spotting
d. Replay Attack

Explanation

Question 156 of 168

1

Guessing a person username and password, credit-card number, cryptographic key refers to

Select one of the following:

a. Replay Attack
b. Brute Force Attack
c. Session Fixation Attack

Explanation

Question 157 of 168

1

1. What is verification phase in reconnaissance?

Select one of the following:

a. Check if the target candidates are actually alive and reachable
b. Find out more about structure of target
c. All the above mentioned
d. Find out individual computers of target

Explanation

Question 158 of 168

1

Which of the following is true about intelligence gathering objectives?

Select one or more of the following:

a. Checks if results are plausible test them
b. Less technical information, but important
c. Involves relatively high amount of manual work
d. Extends scope of security analysis, may reveal new parts of target
e. Gets as many plausible candidates as possible

Explanation

Question 159 of 168

1

Which of the following is the best of protecting from overflow attacks

Select one or more of the following:

a. Aslr
b. Write a code wo vulnerabilities
c. Stack canaries
d. Non executable code

Explanation

Question 160 of 168

1

What does this case mean? An attacker’s target should be accessible

Select one of the following:

a. Must be associated to target
b. All the above mentioned
c. Must be confidential
d. Must be able to attack it

Explanation

Question 161 of 168

1

What does this case mean? An attacker’s target should be relevant

Select one of the following:

a. Must be confidential
b. Must be associated to target
c. Must be able to attack it
d. All the above mentioned

Explanation

Question 162 of 168

1

Why stack overflow attack occurs here?

Select one or more of the following:

a. Strcpy() function does not perform a bounds check
b. Strcpy library is not included
c. Works correctly
d. To “source” variable copied more expected

Explanation

Question 163 of 168

1

What does it mean?

Select one of the following:

a. Buffer allocation
b. Return the value
c. Saves to rbx
d. Call the function

Explanation

Question 164 of 168

1

Which of the following vulnerabilities are NOT listed in OWASP Top 10? Choose all that apply.

Select one or more of the following:

Social Engineering
Cross-site scripting
Unvalidating Redirects and Forwards
Security Misconfiguration
Unvalidating password difficulty

Explanation

Question 165 of 168

1

What flaws arises from session tokens having poor randomness across a range of values?

Select one of the following:

e) Session Hijacking
d) Session Replay
c) Session Fixation
b) Insecure Direct Object References
a) Forwarding system functionality

Explanation

Question 166 of 168

1

Find the best countermeasures to solve an Insecure Direct Object Reference attack. Choose all that apply.

Select one or more of the following:

Properly validate cookie data, URL parameters, all HTML From data
Use reasonable session timeouts
Use secure randomly generated session keys to make prediction impossible
Architect your application to check if the data is encrypted with every request
Do not expose internals to the user

	Created by хомяк убийца almost 7 years ago

- at Quiz on cyber (Beta), created by хомяк убийца on 12/10/2017.

cyber (Beta)

cyber (Beta)

Question 1 of 168

Define foot printing

Select one of the following:

Explanation

Question 2 of 168

Into which classes are instructions grouped

Select one or more of the following:

Explanation

Question 3 of 168

Define a verification in reconnaissance

Select one of the following:

Explanation

Question 4 of 168

Define a command injection

Select one of the following:

Explanation

Question 5 of 168

Define OWASP

Select one of the following:

Explanation

Question 6 of 168

When command injection is possible

Select one of the following:

Explanation

Question 7 of 168

How does an interpreter work?

Select one or more of the following:

Explanation

Question 8 of 168

Find an appropriate types of interpreters

Select one or more of the following:

Explanation

Question 9 of 168

What does register “rip” store?

Select one of the following:

Explanation

Question 10 of 168

Which of the following GDB commands puts breakpoints at the beginning of the program?

Select one of the following:

Explanation

Question 11 of 168

Which of the following GDB commands puts breakpoint N lines down from the current line ?

Select one of the following:

Explanation

Question 12 of 168

Dissasembling

Select one of the following:

Explanation

Question 13 of 168

Callee:

Select one of the following:

Explanation

Question 14 of 168

Caller:

Select one of the following:

Explanation

Question 15 of 168

Give the description of Mem(rsp)?Succ(rip)

Select one of the following:

Explanation

Question 16 of 168

Distinction between jumps and calls

Select one of the following:

Explanation

Question 17 of 168

Distinction between direct and indirect transfers

Select one of the following:

Explanation

Question 18 of 168

Standards (calling conventions) exist for:

Select one of the following:

Explanation

Question 19 of 168

Select all possible ways to protect the stack

Select one or more of the following:

Explanation

Question 20 of 168