1|Page
GFACT exam ||JUST OUT!!!
What is the result of the following Linux command?
sudo find /etc -exec sh -i /;
A)Updating files in /etc with sh
B)Listing executable file in /etc
C) Gaining a shell with root access - ANSWER-Gaining a shell
with root access
Consider the TCP communication between two computers
shown below. What will computer A do following Computer B's
response?
Computer A sends 20 bytes of data
Computer B responds with Computer A's acknowledgment
number + 15
A)Send a FIN packet to close the connection
B) Send the missing five bytes
,2|Page
C)Resend the entire packet
D)Ask computer B what bytes are missing - ANSWER-Resend the
entire packet
A user adds a new directory to a Linux system's $PATH
environment variable, #export $PATH=$PATH:new_dir. What
action will cause the updated $PATH variable change back to
the original value?
A)Closing and re-opening the terminal
B)Running the command "rm $PATH"
C) Echoing the $PATH to /dev/null - ANSWER-Closing and
reopening the terminal
When a program runs on a computer, it temporaily loads code
into memory that contains information about the program. The
code is deleted when the program is closed. What is the
instance of this code called?
A) Process
B) Kernel
,3|Page
C) BIOS
D) Application - ANSWER-Process
What is a requirement for cross-site request forgery to work?
A) The victim must be authenticated with the target site
B) The Attacker must have root privileges on the victim's system
C) The victim must be a member of the IIS_USER group
D) The attacker must steal the victim's cookie - ANSWER-The
victim must be authenticated with the target site
Which of the following commands will set or modify an
environment variable?
A) export
B)grep
C)nano - ANSWER-export
In which directory are Linux logs generally found?
, 4|Page
A)var
B)bin
C)boot
D)mnt - ANSWER-var
What type of exploit is described below?
CVE-2019-9874: Deserialization of Untrusted Data in the
Sitecore.Security.AnitCSRF (aka anti CSRF) module in Sitecore
CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an
unauthenticated attacker to execute arbitrary code by sending a
serialized .NET object in the HTTP POST parameter
__CSRFTOKEN.
A) RCE
B) Heap corruption
C) Information disclosure
D) Buffer over-read
E) File Inclusion
F)SQLi - ANSWER-RCE
GFACT exam ||JUST OUT!!!
What is the result of the following Linux command?
sudo find /etc -exec sh -i /;
A)Updating files in /etc with sh
B)Listing executable file in /etc
C) Gaining a shell with root access - ANSWER-Gaining a shell
with root access
Consider the TCP communication between two computers
shown below. What will computer A do following Computer B's
response?
Computer A sends 20 bytes of data
Computer B responds with Computer A's acknowledgment
number + 15
A)Send a FIN packet to close the connection
B) Send the missing five bytes
,2|Page
C)Resend the entire packet
D)Ask computer B what bytes are missing - ANSWER-Resend the
entire packet
A user adds a new directory to a Linux system's $PATH
environment variable, #export $PATH=$PATH:new_dir. What
action will cause the updated $PATH variable change back to
the original value?
A)Closing and re-opening the terminal
B)Running the command "rm $PATH"
C) Echoing the $PATH to /dev/null - ANSWER-Closing and
reopening the terminal
When a program runs on a computer, it temporaily loads code
into memory that contains information about the program. The
code is deleted when the program is closed. What is the
instance of this code called?
A) Process
B) Kernel
,3|Page
C) BIOS
D) Application - ANSWER-Process
What is a requirement for cross-site request forgery to work?
A) The victim must be authenticated with the target site
B) The Attacker must have root privileges on the victim's system
C) The victim must be a member of the IIS_USER group
D) The attacker must steal the victim's cookie - ANSWER-The
victim must be authenticated with the target site
Which of the following commands will set or modify an
environment variable?
A) export
B)grep
C)nano - ANSWER-export
In which directory are Linux logs generally found?
, 4|Page
A)var
B)bin
C)boot
D)mnt - ANSWER-var
What type of exploit is described below?
CVE-2019-9874: Deserialization of Untrusted Data in the
Sitecore.Security.AnitCSRF (aka anti CSRF) module in Sitecore
CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an
unauthenticated attacker to execute arbitrary code by sending a
serialized .NET object in the HTTP POST parameter
__CSRFTOKEN.
A) RCE
B) Heap corruption
C) Information disclosure
D) Buffer over-read
E) File Inclusion
F)SQLi - ANSWER-RCE
