Question 1

fetch('/api/users?id=1 OR 1=1').then(res => res.json()).then(data => console.log(data));What kind of attack is illustrated?

Options :

A : Command injection

B : Insecure deserialization

C : SQL Injection via JS

D : Cross-site request forgery

Answer: C

Question 2

What vulnerability is present in this PHP snippet?

Options :

A : Command Injection

B : SQL Injection

C : Local File Inclusion

D : Cross-site scripting

Answer: C

Question 3

You’re red teaming and impersonate a helpdesk rep to reset a C-level user’s password. You succeed.What do you document in the report?

Options :

A : Only the password reset

B : Include the impersonation steps, script, and responses

C : Just the outcome

D : Exclude it because it’s too sensitive

Answer: B

Question 4

Which of the following tools does NOT support direct CVE-based vulnerability matching?

Options :

A : Nuclei

B : Nessus

C : Nikto

D : OpenVAS

Answer: C

Question 5

What types of information can be gathered using Amass? (Select all that apply)

Options :

A : ASN (Autonomous System Numbers)

B : Subdomains

C : IP addresses

D : Passwords

Answer: A,B,C