Security+ 1.3 Analyze potential indicators associated with application attacks.

Question 1

Evading antivirus detection and then forcing a Windows machine to load a malicious binary package in memory

Accepted Answer

Dynamic Link Library (DLL) injection

Question 2

An attacker captures some data that is used to start a session legitimately - then resends the data to sneak back in

Accepted Answer

Replay attack

Question 3

An attacker passes data that deliberately overfills an area of memory the application reserves to store expected data

Accepted Answer

A buffer overflow

Question 4

Occurs when the outcome from an execution process is directly dependent on the order and timing of certain events

Accepted Answer

Race condition

Question 5

This occurs when the attacker gets access to a file outside the web server's root directory

Accepted Answer

Directory traversal

Question 6

Malicious script injected onto a trusted site designed to compromise clients browsing the trusted site

Accepted Answer

Cross-site scripting (XSS)

Question 7

Exploiting flaws in an operating system or other application to gain a greater level of access than intended

Accepted Answer

Privilege escalation

Question 8

Occurs when submitted data takes advantage of spoofing, request forgery, and injection of arbitrary code

Accepted Answer

XML injection

Question 9

A code library that intercepts and redirects calls to enable legacy mode on a system

Accepted Answer

A shim

Question 10

Software vulnerability that can occur when an application forces another application to load a dynamic-link library

Accepted Answer

Dynamic Link Library (DLL) injection

Question 11

An attacker exploits a client’s unauthenticated access to submit queries that could create/delete accounts (Port 389)

Accepted Answer

LDAP injection

Question 12

Malicious script hosted on an attacker's site that can exploit a session started on another site in the same browser

Accepted Answer

Cross-site Request Forgery (XSRF)

Question 13

Antivirus software no longer identify the malware by its signature

Accepted Answer

Refactoring

Question 14

A sign of a malicious or corrupted process - particularly serious within service applications and in the OS kernel

Accepted Answer

A memory leak

Question 15

This type of attack inserts code on a website to query and output information from a database such as password hashes

Accepted Answer

SQL injection

Questions 15