C836 WGU Exam Questions with 100%
Correct Answers.
arbitrary code execution
An attack that exploits an applications vulnerability into allowing the attacker to
execute commands on a user's computer.
* arbitrary code execution in intrinsic or securable SQL elements
Privilege Escalation
An attack that exploits a vulnerability in software to gain access to resources that the
user normally would be restricted from accessing. * via SQL injection or local issues
validating user inputs
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
Nikto (and Wikto)
A web server analysis tool that performs checks for many common server-side vulnerabilities &
creates an index of all the files and directories it can see on the target web server (a process
known as spidering)
burp suite
A well-known GUI web analysis tool that offers a free and professional version; the pro
version includes advanced tools for conducting more in-depth attacks
fuzzer
,A type of tool that works by bombarding our applications with all manner of data and inputs
from a wide variety of sources, in the hope that we can cause the application to fail or to
perform in unexpected ways
MiniFuzz File Fuzzer
A tool developed by Microsoft to find flaws in file-handling source code
BinScope Binary Analyzer
A tool developed by Microsoft to examine source code for general good practices
SDL Regex Fuzzer
A tool developed by Microsoft for testing certain pattern-matching expressions for potential
vulnerabilities
good sources of secure coding guidelines
CERT, NIST 800, BSI, an organization's internal coding guidelines
OS hardening
the process of reducing the number of available avenues through which our OS might
be attacked
attack surface
The total of the areas through which our operating system might be attacked
6 main hardening categories
1. Removing unnecessary software
2. Removing or turning off unessential services
3. Making alterations to common accounts
4. Applying the principle of least privilege
5. Applying software updates in a timely manner
6. Making use of logging and auditing functions
Principle of Least Privilege
, states we should only allow a party the absolute minimum permission needed for it to carry
out its function
stuxnet
A particularly complex and impactful item of malware that targeted the Supervisory Control
and Data Acquisition (SCADA) systems that run various industrial processes; this piece of
malware raised the bar for malware from largely being a virtual-based attack to actually being
physically destructive
anti-malware tool
A type of tool that uses signature matching or anomaly detection (heuristics) to detect malware
threats, either in real-time or by performing scans of files and processes
heuristics
the process of anomaly detection used by anti-malware tools to detect malware without
signatures
executable space protection
A hardware and software-based technology that prevents certain portions of the memory used by
the operating system and applications from being used to execute code
buffer overflow (overrun)
The act of inputting more data than an application is expecting from a particular input,
creating the possibility of executing commands by specifically crafting the excess data
ASLR (Address Space Layout Randomization)
a security method that involves shifting the contents of memory around to make tampering
difficult
software firewall
This type of firewall generally contains a subset of the features on a large firewall appliance but
is often capable of similar packet filtering and stateful packet inspection activities
Correct Answers.
arbitrary code execution
An attack that exploits an applications vulnerability into allowing the attacker to
execute commands on a user's computer.
* arbitrary code execution in intrinsic or securable SQL elements
Privilege Escalation
An attack that exploits a vulnerability in software to gain access to resources that the
user normally would be restricted from accessing. * via SQL injection or local issues
validating user inputs
a security best practice for all software
* the most effective way of mitigating SQL injection attacks
Nikto (and Wikto)
A web server analysis tool that performs checks for many common server-side vulnerabilities &
creates an index of all the files and directories it can see on the target web server (a process
known as spidering)
burp suite
A well-known GUI web analysis tool that offers a free and professional version; the pro
version includes advanced tools for conducting more in-depth attacks
fuzzer
,A type of tool that works by bombarding our applications with all manner of data and inputs
from a wide variety of sources, in the hope that we can cause the application to fail or to
perform in unexpected ways
MiniFuzz File Fuzzer
A tool developed by Microsoft to find flaws in file-handling source code
BinScope Binary Analyzer
A tool developed by Microsoft to examine source code for general good practices
SDL Regex Fuzzer
A tool developed by Microsoft for testing certain pattern-matching expressions for potential
vulnerabilities
good sources of secure coding guidelines
CERT, NIST 800, BSI, an organization's internal coding guidelines
OS hardening
the process of reducing the number of available avenues through which our OS might
be attacked
attack surface
The total of the areas through which our operating system might be attacked
6 main hardening categories
1. Removing unnecessary software
2. Removing or turning off unessential services
3. Making alterations to common accounts
4. Applying the principle of least privilege
5. Applying software updates in a timely manner
6. Making use of logging and auditing functions
Principle of Least Privilege
, states we should only allow a party the absolute minimum permission needed for it to carry
out its function
stuxnet
A particularly complex and impactful item of malware that targeted the Supervisory Control
and Data Acquisition (SCADA) systems that run various industrial processes; this piece of
malware raised the bar for malware from largely being a virtual-based attack to actually being
physically destructive
anti-malware tool
A type of tool that uses signature matching or anomaly detection (heuristics) to detect malware
threats, either in real-time or by performing scans of files and processes
heuristics
the process of anomaly detection used by anti-malware tools to detect malware without
signatures
executable space protection
A hardware and software-based technology that prevents certain portions of the memory used by
the operating system and applications from being used to execute code
buffer overflow (overrun)
The act of inputting more data than an application is expecting from a particular input,
creating the possibility of executing commands by specifically crafting the excess data
ASLR (Address Space Layout Randomization)
a security method that involves shifting the contents of memory around to make tampering
difficult
software firewall
This type of firewall generally contains a subset of the features on a large firewall appliance but
is often capable of similar packet filtering and stateful packet inspection activities
