Q. Why may it be more difficult to patch IoT devices compared to traditional servers?

View solution

Q. What is a characteristic of IoT devices?

View solution

Q. What is a common form of injection attack?

View solution

Q. What are the two best ways to protect against SQL injection attacks?

View solution

Q. Cross-Site Scripting (XSS) vulnerabilities can trick users into executing malicious code on a trusted website.

View solution

Q. What should cybersecurity analysts do when discovering potential XSS vulnerabilities?

View solution

Q. How do vulnerability scanners usually rank detected issues?

View solution

Q. What can false positive reports in vulnerability scans lead to?

View solution

Q. What is a measure used in the Common Vulnerability Scoring System (CVSS) to assess vulnerabilities?

View solution

Q. What should penetration testers be careful to watch for when interpreting vulnerability reports?

View solution

Q. What does Cross-Site Scripting (XSS) aim to achieve?

View solution

Q. What crucial information is typically included in vulnerability scan reports, in addition to details about vulnerabilities?

View solution

Q. What does the CVSS base score measure on a 10-point scale?

View solution

Q. Name two common sources of vulnerabilities.

View solution

Q. What type of attacks typically exploit application flaws?

View solution

Q. What is a common source of vulnerabilities in network devices?

View solution

Q. What should network administrators ensure to patch security issues in network devices?

View solution

Q. What causes vulnerabilities in SSL and TLS encryption?

View solution

Q. What should administrators do to protect against virtual machine escape attacks in virtualized infrastructure?

View solution

Q. What does the CVSS base score consider regarding the impact of a vulnerability?

View solution