WGU D484 (Latest Update )
Penetration Testing Questions & Answers
{Grade A} 100% Correct
Business Logic Process - Correct answer represents the flow of information from the
time the user requests access to the time the request hits a resource
Patching Fragmentation - Correct answer A threat that can occur when device updates
are not implemented in a timely manner.
Biometric Integration - Correct answer A system that employs a biometric, such as a
fingerprint or facial recognition, when authenticating into a system
Bluetooth Low Energy (BLE) - Correct answer A technology similar to Bluetooth, in
that it is used to communicate wirelessly over short distances; however, it uses less
energy.
Data Center - Correct answer A large group of servers that provides storage,
processing, and distribution of critical company data for the network clients.
,Direct Attached Storage (DAS) - Correct answer Storage attached to a system such as
a hard drive in a server instead of being accessed over the network.
Network Attached Storage (NAS) - Correct answer A group of file servers attached to
the network dedicated to provisioning data access
Storage Area Network (SAN) - Correct answer A separate subnetwork typically
consisting of storage devices and servers that house a large amount of data.
VM sprawl - Correct answer Configuration vulnerability where provisioning and
deprovisioning of virtual assets is not properly authorized and monitored.
VM Attack - Class 1 - Correct answer the attack happens outside of the VM.
VM Attack - Class 2 - Correct answer the attack directly affects a VM.
,VM Attack - Class 3 - Correct answer the attack originates within the VM and is the
attack source.
VM escape - Correct answer An attack where malware running in a VM is able to
interact directly with the hypervisor or host kernel.
Session Hijacking - Correct answer A malicious actor steals a user's session
credential then uses it to impersonate the user.
Session Fixation - Correct answer An attack that forces a user to browse a website in
the context of a known and valid session.
Session Replay - Correct answer This requires having access to the user
authentication process itself, so that it can be intercepted and repeated.
Cross-site request forgery (XSRF) - Correct answer A malicious script hosted on the
attacker's site that can exploit a session started on another site in the same browser.
, Server-side request forgery (SSRF) - Correct answer An attack where an attacker
takes advantage of the trust established between the server and the resources it can
access, including itself.
Horizontal Privilege Escalation - Correct answer When a user accesses or modifies
specific resources that they are not entitled to.
Vertical Privilege Escalation - Correct answer When an attacker can perform functions
that are normally assigned to users in higher roles, and often explicitly denied to the
attacker.
Business Logic Flaw - Correct answer Vulnerabilities that arise from implementation
and design issues that lead to unintended behavior.
Stack multiple queires - Correct answer The process of modifying the SQL query to
include new query type.
Penetration Testing Questions & Answers
{Grade A} 100% Correct
Business Logic Process - Correct answer represents the flow of information from the
time the user requests access to the time the request hits a resource
Patching Fragmentation - Correct answer A threat that can occur when device updates
are not implemented in a timely manner.
Biometric Integration - Correct answer A system that employs a biometric, such as a
fingerprint or facial recognition, when authenticating into a system
Bluetooth Low Energy (BLE) - Correct answer A technology similar to Bluetooth, in
that it is used to communicate wirelessly over short distances; however, it uses less
energy.
Data Center - Correct answer A large group of servers that provides storage,
processing, and distribution of critical company data for the network clients.
,Direct Attached Storage (DAS) - Correct answer Storage attached to a system such as
a hard drive in a server instead of being accessed over the network.
Network Attached Storage (NAS) - Correct answer A group of file servers attached to
the network dedicated to provisioning data access
Storage Area Network (SAN) - Correct answer A separate subnetwork typically
consisting of storage devices and servers that house a large amount of data.
VM sprawl - Correct answer Configuration vulnerability where provisioning and
deprovisioning of virtual assets is not properly authorized and monitored.
VM Attack - Class 1 - Correct answer the attack happens outside of the VM.
VM Attack - Class 2 - Correct answer the attack directly affects a VM.
,VM Attack - Class 3 - Correct answer the attack originates within the VM and is the
attack source.
VM escape - Correct answer An attack where malware running in a VM is able to
interact directly with the hypervisor or host kernel.
Session Hijacking - Correct answer A malicious actor steals a user's session
credential then uses it to impersonate the user.
Session Fixation - Correct answer An attack that forces a user to browse a website in
the context of a known and valid session.
Session Replay - Correct answer This requires having access to the user
authentication process itself, so that it can be intercepted and repeated.
Cross-site request forgery (XSRF) - Correct answer A malicious script hosted on the
attacker's site that can exploit a session started on another site in the same browser.
, Server-side request forgery (SSRF) - Correct answer An attack where an attacker
takes advantage of the trust established between the server and the resources it can
access, including itself.
Horizontal Privilege Escalation - Correct answer When a user accesses or modifies
specific resources that they are not entitled to.
Vertical Privilege Escalation - Correct answer When an attacker can perform functions
that are normally assigned to users in higher roles, and often explicitly denied to the
attacker.
Business Logic Flaw - Correct answer Vulnerabilities that arise from implementation
and design issues that lead to unintended behavior.
Stack multiple queires - Correct answer The process of modifying the SQL query to
include new query type.
