GAQM CEH-001 Questions Answers

command injection.

SQL injection.

directory traversal.

LDAP injection.

Threat identification, vulnerability identification, control analysis

Threat identification, response identification, mitigation identification

Attack profile, defense profile, loss profile

System profile, vulnerability identification, security determination

The request to the web server is not visible to the administrator of the vulnerable application.

The attack is called “Blind” because, although the application properly filters user input, it is still vulnerable to code injection.

The successful attack does not show an error message to the administrator of the affected application.

The vulnerable application does not display errors with information about the injection results to the attacker.

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.