Question 1

What types of web application vulnerabilities continue to be the MOST prolific according to the OWASP Top 10?

APoor Password Management.

BInsecure Deserialsiation.

CInjection Flaws.

DSecurity Misconfiguration

Answer : C

According to the OWASP Top 10 list, Injection Flaws are among the most prolific web application vulnerabilities. This category includes a variety of attacks such as SQL, NoSQL, OS, and LDAP injection where untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing unauthorized data. Injection flaws are particularly dangerous because they can lead to data breaches, loss of data integrity, and denial of service, among other impacts.

Question 2

A penetration tester undertaking a port scan of a client's network, discovers a host which responds to requests on TCP ports 22, 80, 443, 3306 and 8080.

What type of device has MOST LIKELY been discovered?

AFile server.

BPrinter.

CFirewall.

DWeb server

Answer : D

The ports discovered during the port scan are indicative of the services that are likely running on the device. Here's a breakdown of what each port typically signifies:

TCP port 22: This is commonly used for Secure Shell (SSH) which is used for secure logins, file transfers (scp, sftp) and port forwarding.

TCP port 80: This port is used for Hypertext Transfer Protocol (HTTP), which is the foundation of data communication for the World Wide Web; essentially, it's the standard port for web traffic.

TCP port 443: This is used for HTTP Secure (HTTPS). It's the protocol for secure communication over a computer network within a web browser, providing a secure version of HTTP.

TCP port 3306: This is the default port for the MySQL database, which is often used in conjunction with web applications.

TCP port 8080: This is an alternative to port 80 and is used for web traffic, particularly for proxy and caching.

Given this information, the most likely type of device is aWeb server, as it uses these ports for web traffic, secure communication, and potentially for a database that supports web applications.

Question 3

What Is the root cause as to why SMS messages are open to attackers and abuse?

AThe store and forward nature of SMS means it is considered a 'fire and forget service'.

BSMS technology was never intended to be used to transmit high risk content such as One-time payment codes.

CThe vast majority of mobile phones globally support the SMS protocol inexpensively.

DThere are only two mobile phone platforms - Android and iOS - reducing the number of target environments.

Answer : B

SMS technology was originally designed for casual, low-security communication. It lacks the robust security features required for transmitting sensitive information, such as one-time payment codes. The protocol does not encrypt messages, leaving them vulnerable to interception during transmission.Furthermore, the widespread adoption of SMS for various services has made it an attractive target for attackers, leading to exploitation through methods like SIM swapping, phishing, and other forms of abuse12.

Question 4

What Is the PRIMARY reason for organisations obtaining outsourced managed security services?

AManaged security services permit organisations to absolve themselves of responsibility for security.

BManaged security services are a de facto requirement for certification to core security standards such as ISG/IEC 27001

CManaged security services provide access to specialist security tools and expertise on a shared, cost-effective basis.

DManaged security services are a powerful defence against litigation in the event of a security breach or incident

Answer : C

The primary reason organizations opt for outsourced managed security services is to gain access to specialized security tools and expertise that may not be feasible to maintain in-house due to cost or resource constraints. Managed Security Service Providers (MSSPs) offer a range of security services that can be tailored to an organization's needs, allowing them to benefit from advanced security measures without the need for significant capital investment or the hiring of specialized staff. This shared service model is cost-effective and enables organizations to focus on their core business activities while ensuring robust security measures are in place. MSSPs can provide continuous monitoring, management of security devices and systems, incident response, and compliance support, which are crucial for maintaining a strong security posture in the face of evolving threats and complex regulatory environments.

Question 5

What type of attack could directly affect the confidentiality of an unencrypted VoIP network?

APacket Sniffing.

BBrute Force Attack.

CRansomware.

DVishing Attack

Answer : A

Packet sniffing is a type of network attack that can directly affect the confidentiality of an unencrypted VoIP network. In packet sniffing, an attacker captures data packets as they travel across the network. Since VoIP calls transmit voice data in the form of data packets, an unencrypted VoIP network is particularly vulnerable to this type of attack. The attacker can potentially listen to the conversations or extract sensitive information from these packets.This compromises the confidentiality principle of information security, which aims to protect information from unauthorized disclosure12.

Brute Force Attack (B) and Ransomware are more related to the integrity and availability of systems rather than confidentiality. Vishing Attack (D) is a form of phishing which involves social engineering over telephone systems but does not directly affect the network's confidentiality like packet sniffing does.

Information Security Management Principles, 3rd Edition1.

VoIP Hacking: How It Works & How to Protect Your VoIP Phone3.

Free Practice Questions for BCS CISMP-V9 Exam

Question 1

Question 2

Question 3

Question 4

Question 5