GFACT FINAL PAPER UPDATED QUESTIONS
VERIFIED COMPLETE ANSWERS 100
PERCENT CORRECT
◉ (B1, Pg135) In which directory are Linux logs generally found?
A)var
B)bin
C)boot
D)mnt
*HINT* The "blank" folder contains system files that tend to increase
in size over time (hence it's a "blank" size folder). Things like log
files, the mail directory, and so on, go here.
Answer: var
◉ What type of exploit is described below?
CVE-2019-9874: Deserialization of Untrusted Data in the
Sitecore.Security.AnitCSRF (aka anti CSRF) module in Sitecore CMS
7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated
,attacker to execute arbitrary code by sending a serialized .NET
object in the HTTP POST parameter __CSRFTOKEN.
A) RCE
B) Heap corruption
C) Information disclosure
D) Buffer over-read
E) File Inclusion
F)SQLi
*HINT* "Blank" bugs allow an attacker to achieve "arbitrary code
execution." This, in effect, allows them to assume control of a target
system. They can come in many flavors but are often seen as the
most high-risk category of attack.
Answer: RCE
◉ (B3, Pg202) Which buffer overflow mitigation places a value
before the return pointer in the stack?
A) Canary
B) Parameterized query
C) Random session token
D) Format String
, *HINT* The stack "blank" is a value that sits before the return
pointer in the stack. When the program's execution hits the return
instruction, before the return pointer is loaded into EIP, the value of
the stack "blank" is checked. If it has been overwritten, then the
program terminates because the CPU then knows that something
dodgy was going on, since the value of the stack "blank" which
shouldn't have changed has changed. The stack "blank" can usually
be bypassed by finding out the value the "blank" is expected to be
and overwriting it with the same value. Sometimes this is made
harder by a stack "blank" that contains null byte values since many
functions which read user input in C will stop reading more data as
soon as they see a null byte
Answer: Canary
◉ (B1, Pg128) Which Linux command will allow a user to run a
command with escalated privileges using their own password?
A)sudo
B)bash
C)su
D)which
*HINT* The "blank" program will allow a user to temporarily take on
the privileges of the root account to run a command and then it will
VERIFIED COMPLETE ANSWERS 100
PERCENT CORRECT
◉ (B1, Pg135) In which directory are Linux logs generally found?
A)var
B)bin
C)boot
D)mnt
*HINT* The "blank" folder contains system files that tend to increase
in size over time (hence it's a "blank" size folder). Things like log
files, the mail directory, and so on, go here.
Answer: var
◉ What type of exploit is described below?
CVE-2019-9874: Deserialization of Untrusted Data in the
Sitecore.Security.AnitCSRF (aka anti CSRF) module in Sitecore CMS
7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated
,attacker to execute arbitrary code by sending a serialized .NET
object in the HTTP POST parameter __CSRFTOKEN.
A) RCE
B) Heap corruption
C) Information disclosure
D) Buffer over-read
E) File Inclusion
F)SQLi
*HINT* "Blank" bugs allow an attacker to achieve "arbitrary code
execution." This, in effect, allows them to assume control of a target
system. They can come in many flavors but are often seen as the
most high-risk category of attack.
Answer: RCE
◉ (B3, Pg202) Which buffer overflow mitigation places a value
before the return pointer in the stack?
A) Canary
B) Parameterized query
C) Random session token
D) Format String
, *HINT* The stack "blank" is a value that sits before the return
pointer in the stack. When the program's execution hits the return
instruction, before the return pointer is loaded into EIP, the value of
the stack "blank" is checked. If it has been overwritten, then the
program terminates because the CPU then knows that something
dodgy was going on, since the value of the stack "blank" which
shouldn't have changed has changed. The stack "blank" can usually
be bypassed by finding out the value the "blank" is expected to be
and overwriting it with the same value. Sometimes this is made
harder by a stack "blank" that contains null byte values since many
functions which read user input in C will stop reading more data as
soon as they see a null byte
Answer: Canary
◉ (B1, Pg128) Which Linux command will allow a user to run a
command with escalated privileges using their own password?
A)sudo
B)bash
C)su
D)which
*HINT* The "blank" program will allow a user to temporarily take on
the privileges of the root account to run a command and then it will
