Unit 3 - 2.3.2 - OS and Web-based Vulnerabilities

What is a buffer overflow vulnerability?

• When a user gains unauthorized access to higher-level privileges.

• Errors in the configuration of security settings.

• When a program writes more data to a buffer than it can handle, leading to the overflow of adjacent memory.

• Use of outdated communication protocols and services.

Which type of vulnerability occurs when a user or process gains unauthorized access to higher-level privileges?

• Privilege Escalation

• Denial-of-Service (DoS) Attack

• Buffer Overflow

• SQL Injection

What is the primary purpose of a Denial-of-Service (DoS) attack?

• To gain unauthorized access to sensitive data.

• To execute arbitrary code on a system.

• To overload a system with traffic, making it slow or unresponsive.

• To intercept data in transit.

What is the term used to describe security flaws that are unknown to the software vendor and have no available patch?

• Zero-Day Vulnerabilities

• Unpatched Software

• Security Misconfigurations

• Outdated Protocols

Which type of attack occurs when a user injects commands or code into a web server to execute?

• Cross-site Scripting (XSS)

• Command Injection

• SQL Injection

• Denial-of-Service (DoS) Attack

SQL stands for:

• Secure Query Language

• Structured Query Language

• Server Query Language

• System Query Language

What is the primary purpose of Cross-site Scripting (XSS)?

• To gain unauthorized access to sensitive data.

• To execute arbitrary code on a system.

• To bypass access controls and impersonate users.

• To overload a system with traffic, making it slow or unresponsive.

Which technology is subject to injection attacks when used for structuring data exchanged on the web?

• LDAP

• XML

• DLL

• SQL