Topic 07 Practice Test 1 covers Vulnerability Types for CompTIA Security+ SY0-701 and maps to objective 2.3: Explain various types of vulnerabilities. For broader exam preparation, review the CompTIA Security+ Exam Dumps. Every option includes focused editorial reasoning explaining both the concept and its fit to the scenario.
Question 1
To gain privileges or execute code through a flaw in core platform software, which security approach should be selected?
- Operating-system vulnerability
- Sideloading
- VM escape
- Cross-site scripting (XSS)
Correct Answer: A
Correct Answer
Answer A is correct because Operating-system vulnerability means a weakness in the operating system kernel, service, driver, or security configuration. This matches the requirement as written. Cross-site scripting (XSS) can be valid in another context, but it is used for injection of active client-side content that executes in another user’s browser under the context of a trusted site.
Incorrect Answers
Answer B is incorrect because Sideloading refers to installation of software from a source outside the approved application distribution mechanism. The scenario instead requires a weakness in the operating system kernel, service, driver, or security configuration, which is why Operating-system vulnerability is the better answer; this option serves the different function defined above.
Answer C is incorrect because VM escape refers to a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. This could be appropriate elsewhere, but the required function is a weakness in the operating system kernel, service, driver, or security configuration; that makes Operating-system vulnerability the precise choice.
Answer D is incorrect because Cross-site scripting (XSS) refers to injection of active client-side content that executes in another user’s browser under the context of a trusted site. The scenario instead requires a weakness in the operating system kernel, service, driver, or security configuration, which is why Operating-system vulnerability is the better answer; this option serves the different function defined above.
Question 2
Which term describes placing malicious code or data into the memory space of a running process?
- Resource reuse
- Cryptographic vulnerability
- Memory injection
- Security misconfiguration
Correct Answer: C
Correct Answer
Answer C is correct because Memory injection means placing malicious code or data into the memory space of a running process. The requirement maps directly to this function, whereas Cryptographic vulnerability is aimed at a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation.
Incorrect Answers
Answer A is incorrect because Resource reuse refers to risk that residual data from a previous user or workload remains accessible when memory or storage resources are reassigned. That concept can be valid in another scenario, but this question is testing placing malicious code or data into the memory space of a running process; Memory injection therefore fits the requirement more directly.
Answer B is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. This could be appropriate elsewhere, but the required function is placing malicious code or data into the memory space of a running process; that makes Memory injection the precise choice.
Answer D is incorrect because Security misconfiguration refers to an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults. The scenario instead requires placing malicious code or data into the memory space of a running process, which is why Memory injection is the better answer; this option serves the different function defined above.
Question 3
During a vulnerability analysis, the team has two independent requirements: (1) race condition caused by a gap between checking a resource and later using it; and (2) risk introduced by old technology that must remain in service despite outdated security capabilities. Which TWO choices best satisfy those requirements? Choose TWO.
- Malicious update
- Sideloading
- TOCTOU vulnerability
- VM escape
- Legacy-system vulnerability
Correct Answers: C, E
Correct Answers
Answer C is correct because TOCTOU vulnerability means a race condition caused by a gap between checking a resource and later using it. This selection maps directly to one of the named needs. Malicious update addresses a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism, so it does not satisfy the same slot.
Answer E is correct because Legacy-system vulnerability means risk introduced by old technology that must remain in service despite outdated security capabilities. One required function is exactly what this option provides. Malicious update may be useful elsewhere, but it is used for a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism.
Incorrect Answers
Answer A is incorrect because Malicious update means a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. Every answer slot must map to a stated requirement. The correct set is Legacy-system vulnerability, TOCTOU vulnerability, so this option cannot replace one of those selections.
Answer B is incorrect because Sideloading means installation of software from a source outside the approved application distribution mechanism. The scenario calls for Legacy-system vulnerability, TOCTOU vulnerability. Selecting this option would leave one of those required functions uncovered. For example, TOCTOU vulnerability is required for a race condition caused by a gap between checking a resource and later using it.
Answer D is incorrect because VM escape means a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. The question requires exactly 2 selections: Legacy-system vulnerability, TOCTOU vulnerability. This option falls outside that required set.
Question 4
Which term describes injection of attacker-controlled SQL syntax into an application’s database query?
- Cryptographic vulnerability
- Firmware vulnerability
- SQL injection
- TOCTOU vulnerability
Correct Answer: C
Correct Answer
Answer C is correct because SQL injection means injection of attacker-controlled SQL syntax into an application’s database query. This matches the requirement as written. Firmware vulnerability can be valid in another context, but it is used for a weakness in low-level device software that controls hardware operation.
Incorrect Answers
Answer A is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The question is not asking for this function. It is testing injection of attacker-controlled SQL syntax into an application’s database query, so SQL injection is the stronger fit.
Answer B is incorrect because Firmware vulnerability refers to a weakness in low-level device software that controls hardware operation. That concept can be valid in another scenario, but this question is testing injection of attacker-controlled SQL syntax into an application’s database query; SQL injection therefore fits the requirement more directly.
Answer D is incorrect because TOCTOU vulnerability refers to a race condition caused by a gap between checking a resource and later using it. The question is not asking for this function. It is testing injection of attacker-controlled SQL syntax into an application’s database query, so SQL injection is the stronger fit.
Question 5
A review during a vulnerability analysis identifies two gaps. One requires writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory. The other requires compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. Which TWO options should be included in the remediation plan? Choose TWO.
- Buffer overflow
- Memory injection
- Cross-site scripting (XSS)
- Malicious update
- End-of-life vulnerability
Correct Answers: A, D
Correct Answers
Answer A is correct because Buffer overflow means writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory. One required function is exactly what this option provides. Cross-site scripting (XSS) may be useful elsewhere, but it is used for injection of active client-side content that executes in another user’s browser under the context of a trusted site.
Answer D is correct because Malicious update means a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. This option satisfies a specific requirement in the stem; Cross-site scripting (XSS) serves injection of active client-side content that executes in another user’s browser under the context of a trusted site and therefore is not interchangeable with it.
Incorrect Answers
Answer B is incorrect because Memory injection means placing malicious code or data into the memory space of a running process. The required choices are Malicious update, Buffer overflow. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer C is incorrect because Cross-site scripting (XSS) means injection of active client-side content that executes in another user’s browser under the context of a trusted site. The required choices are Malicious update, Buffer overflow. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because End-of-life vulnerability means risk created when a product has reached the end of vendor support and no longer receives security fixes. The fixed-count answer set is Malicious update, Buffer overflow; this option does not fill one of those named functions.
Question 6
To defeat intended confidentiality, integrity, or authentication protections, which security approach should be selected?
- Race condition
- Cryptographic vulnerability
- Malicious update
- Cross-site scripting (XSS)
Correct Answer: B
Correct Answer
Answer B is correct because Cryptographic vulnerability means a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The deciding point is functional fit: this option covers the stated need, while Malicious update addresses a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism.
Incorrect Answers
Answer A is incorrect because Race condition refers to a flaw in which security depends on the timing or ordering of concurrent operations. This could be appropriate elsewhere, but the required function is a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation; that makes Cryptographic vulnerability the precise choice.
Answer C is incorrect because Malicious update refers to a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. This could be appropriate elsewhere, but the required function is a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation; that makes Cryptographic vulnerability the precise choice.
Answer D is incorrect because Cross-site scripting (XSS) refers to injection of active client-side content that executes in another user’s browser under the context of a trusted site. The key mismatch is functional: Cryptographic vulnerability addresses a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation, the need stated by the question.
Question 7
What is a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration?
- Buffer overflow
- Sideloading
- Legacy-system vulnerability
- Cloud-specific vulnerability
Correct Answer: D
Correct Answer
Answer D is correct because Cloud-specific vulnerability means a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration. This is the precise fit for the scenario. Sideloading serves the different purpose of installation of software from a source outside the approved application distribution mechanism.
Incorrect Answers
Answer A is incorrect because Buffer overflow refers to writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory. The scenario instead requires a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration, which is why Cloud-specific vulnerability is the better answer; this option serves the different function defined above.
Answer B is incorrect because Sideloading refers to installation of software from a source outside the approved application distribution mechanism. The scenario instead requires a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration, which is why Cloud-specific vulnerability is the better answer; this option serves the different function defined above.
Answer C is incorrect because Legacy-system vulnerability refers to risk introduced by old technology that must remain in service despite outdated security capabilities. This could be appropriate elsewhere, but the required function is a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration; that makes Cloud-specific vulnerability the precise choice.
Question 8
To steal session data or manipulate browser behavior through unsafe output handling, which security approach should be selected?
- Cross-site scripting (XSS)
- Sideloading
- Memory injection
- VM escape
Correct Answer: A
Correct Answer
Answer A is correct because Cross-site scripting (XSS) means injection of active client-side content that executes in another user’s browser under the context of a trusted site. The requirement maps directly to this function, whereas VM escape is aimed at a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary.
Incorrect Answers
Answer B is incorrect because Sideloading refers to installation of software from a source outside the approved application distribution mechanism. The scenario instead requires injection of active client-side content that executes in another user’s browser under the context of a trusted site, which is why Cross-site scripting (XSS) is the better answer; this option serves the different function defined above.
Answer C is incorrect because Memory injection refers to placing malicious code or data into the memory space of a running process. This could be appropriate elsewhere, but the required function is injection of active client-side content that executes in another user’s browser under the context of a trusted site; that makes Cross-site scripting (XSS) the precise choice.
Answer D is incorrect because VM escape refers to a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. This could be appropriate elsewhere, but the required function is injection of active client-side content that executes in another user’s browser under the context of a trusted site; that makes Cross-site scripting (XSS) the precise choice.
Question 9
To read or manipulate database data when input is not handled safely, which security approach should be selected?
- SQL injection
- Cryptographic vulnerability
- Memory injection
- Supply-chain vulnerability
Correct Answer: A
Correct Answer
Answer A is correct because SQL injection means injection of attacker-controlled SQL syntax into an application’s database query. The deciding point is functional fit: this option covers the stated need, while Supply-chain vulnerability addresses a weakness introduced through software dependencies, service providers, vendors, or hardware components.
Incorrect Answers
Answer B is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The key mismatch is functional: SQL injection addresses injection of attacker-controlled SQL syntax into an application’s database query, the need stated by the question.
Answer C is incorrect because Memory injection refers to placing malicious code or data into the memory space of a running process. That concept can be valid in another scenario, but this question is testing injection of attacker-controlled SQL syntax into an application’s database query; SQL injection therefore fits the requirement more directly.
Answer D is incorrect because Supply-chain vulnerability refers to a weakness introduced through software dependencies, service providers, vendors, or hardware components. The key mismatch is functional: SQL injection addresses injection of attacker-controlled SQL syntax into an application’s database query, the need stated by the question.
Question 10
Which term describes writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory?
- Race condition
- Buffer overflow
- VM escape
- End-of-life vulnerability
Correct Answer: B
Correct Answer
Answer B is correct because Buffer overflow means writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory. The deciding point is functional fit: this option covers the stated need, while Race condition addresses a flaw in which security depends on the timing or ordering of concurrent operations.
Incorrect Answers
Answer A is incorrect because Race condition refers to a flaw in which security depends on the timing or ordering of concurrent operations. The scenario instead requires writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory, which is why Buffer overflow is the better answer; this option serves the different function defined above.
Answer C is incorrect because VM escape refers to a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. The scenario instead requires writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory, which is why Buffer overflow is the better answer; this option serves the different function defined above.
Answer D is incorrect because End-of-life vulnerability refers to risk created when a product has reached the end of vendor support and no longer receives security fixes. The concept is valid, but it does not match this stem. The required function is writing more data to a memory buffer than it can safely hold, potentially overwriting adjacent memory, which maps to Buffer overflow.
Question 11
To break out of a guest and compromise a more privileged virtualization layer, which security approach should be selected?
- Security misconfiguration
- Cryptographic vulnerability
- Sideloading
- VM escape
Correct Answer: D
Correct Answer
Answer D is correct because VM escape means a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. This matches the requirement as written. Security misconfiguration can be valid in another context, but it is used for an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults.
Incorrect Answers
Answer A is incorrect because Security misconfiguration refers to an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults. This could be appropriate elsewhere, but the required function is a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary; that makes VM escape the precise choice.
Answer B is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. This could be appropriate elsewhere, but the required function is a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary; that makes VM escape the precise choice.
Answer C is incorrect because Sideloading refers to installation of software from a source outside the approved application distribution mechanism. This could be appropriate elsewhere, but the required function is a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary; that makes VM escape the precise choice.
Question 12
A review during a vulnerability analysis identifies two gaps. One requires weakness introduced through software dependencies, service providers, vendors, or hardware components. The other requires removing vendor-imposed restrictions on a mobile device or operating system. Which TWO options should be included in the remediation plan? Choose TWO.
- Cryptographic vulnerability
- TOCTOU vulnerability
- Memory injection
- Jailbreaking
- Supply-chain vulnerability
Correct Answers: D, E
Correct Answers
Answer D is correct because Jailbreaking means removing vendor-imposed restrictions on a mobile device or operating system. This selection maps directly to one of the named needs. Cryptographic vulnerability addresses a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation, so it does not satisfy the same slot.
Answer E is correct because Supply-chain vulnerability means a weakness introduced through software dependencies, service providers, vendors, or hardware components. The fixed-count item needs this function in the answer set. TOCTOU vulnerability covers a race condition caused by a gap between checking a resource and later using it, a different requirement.
Incorrect Answers
Answer A is incorrect because Cryptographic vulnerability means a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The question requires exactly 2 selections: Supply-chain vulnerability, Jailbreaking. This option falls outside that required set.
Answer B is incorrect because TOCTOU vulnerability means a race condition caused by a gap between checking a resource and later using it. Every answer slot must map to a stated requirement. The correct set is Supply-chain vulnerability, Jailbreaking, so this option cannot replace one of those selections.
Answer C is incorrect because Memory injection means placing malicious code or data into the memory space of a running process. The required choices are Supply-chain vulnerability, Jailbreaking. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Question 13
During a vulnerability analysis, the team has two independent requirements: (1) weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration; and (2) unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults. Which TWO choices best satisfy those requirements? Choose TWO.
- Supply-chain vulnerability
- Jailbreaking
- Cloud-specific vulnerability
- Security misconfiguration
- VM escape
Correct Answers: C, D
Correct Answers
Answer C is correct because Cloud-specific vulnerability means a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration. It belongs in the fixed-count answer set because it covers one of the stated requirements. Supply-chain vulnerability instead serves a weakness introduced through software dependencies, service providers, vendors, or hardware components and cannot replace this function.
Answer D is correct because Security misconfiguration means an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults. This option satisfies a specific requirement in the stem; VM escape serves a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary and therefore is not interchangeable with it.
Incorrect Answers
Answer A is incorrect because Supply-chain vulnerability means a weakness introduced through software dependencies, service providers, vendors, or hardware components. The question requires exactly 2 selections: Security misconfiguration, Cloud-specific vulnerability. This option falls outside that required set. For example, Security misconfiguration is required for an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults.
Answer B is incorrect because Jailbreaking means removing vendor-imposed restrictions on a mobile device or operating system. The question requires exactly 2 selections: Security misconfiguration, Cloud-specific vulnerability. This option falls outside that required set. For example, Cloud-specific vulnerability is required for a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration.
Answer E is incorrect because VM escape means a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. The fixed-count answer set is Security misconfiguration, Cloud-specific vulnerability; this option does not fill one of those named functions.
Question 14
Which weakness in low-level device software controls hardware operation?
- TOCTOU vulnerability
- Security misconfiguration
- Firmware vulnerability
- SQL injection
Correct Answer: C
Correct Answer
Answer C is correct because Firmware vulnerability means a weakness in low-level device software that controls hardware operation. The deciding point is functional fit: this option covers the stated need, while TOCTOU vulnerability addresses a race condition caused by a gap between checking a resource and later using it.
Incorrect Answers
Answer A is incorrect because TOCTOU vulnerability refers to a race condition caused by a gap between checking a resource and later using it. This could be appropriate elsewhere, but the required function is a weakness in low-level device software that controls hardware operation; that makes Firmware vulnerability the precise choice.
Answer B is incorrect because Security misconfiguration refers to an unsafe system or application setting such as excessive permissions, exposed services, or insecure defaults. The question is not asking for this function. It is testing a weakness in low-level device software that controls hardware operation, so Firmware vulnerability is the stronger fit.
Answer D is incorrect because SQL injection refers to injection of attacker-controlled SQL syntax into an application’s database query. The key mismatch is functional: Firmware vulnerability addresses a weakness in low-level device software that controls hardware operation, the need stated by the question.
Question 15
What is a weakness introduced through software dependencies, service providers, vendors, or hardware components?
- Cryptographic vulnerability
- Malicious update
- Cross-site scripting (XSS)
- Supply-chain vulnerability
Correct Answer: D
Correct Answer
Answer D is correct because Supply-chain vulnerability means a weakness introduced through software dependencies, service providers, vendors, or hardware components. This is the precise fit for the scenario. Malicious update serves the different purpose of a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism.
Incorrect Answers
Answer A is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The scenario instead requires a weakness introduced through software dependencies, service providers, vendors, or hardware components, which is why Supply-chain vulnerability is the better answer; this option serves the different function defined above.
Answer B is incorrect because Malicious update refers to a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. This could be appropriate elsewhere, but the required function is a weakness introduced through software dependencies, service providers, vendors, or hardware components; that makes Supply-chain vulnerability the precise choice.
Answer C is incorrect because Cross-site scripting (XSS) refers to injection of active client-side content that executes in another user’s browser under the context of a trusted site. The key mismatch is functional: Supply-chain vulnerability addresses a weakness introduced through software dependencies, service providers, vendors, or hardware components, the need stated by the question.
Question 16
Two requirements remain open in a vulnerability analysis: virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary; installation of software from a source outside the approved application distribution mechanism. Which TWO options close those specific gaps? Choose TWO.
- Malicious update
- Sideloading
- Legacy-system vulnerability
- VM escape
- Memory injection
Correct Answers: B, D
Correct Answers
Answer B is correct because Sideloading means installation of software from a source outside the approved application distribution mechanism. It belongs in the fixed-count answer set because it covers one of the stated requirements. Legacy-system vulnerability instead serves risk introduced by old technology that must remain in service despite outdated security capabilities and cannot replace this function.
Answer D is correct because VM escape means a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. This selection maps directly to one of the named needs. Legacy-system vulnerability addresses risk introduced by old technology that must remain in service despite outdated security capabilities, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because Malicious update means a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. The scenario calls for VM escape, Sideloading. Selecting this option would leave one of those required functions uncovered.
Answer C is incorrect because Legacy-system vulnerability means risk introduced by old technology that must remain in service despite outdated security capabilities. The required choices are VM escape, Sideloading. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Memory injection means placing malicious code or data into the memory space of a running process. The scenario calls for VM escape, Sideloading. Selecting this option would leave one of those required functions uncovered.
Question 17
To bypass normal application vetting and introduce untrusted mobile software, which security approach should be selected?
- Cryptographic vulnerability
- Sideloading
- Jailbreaking
- SQL injection
Correct Answer: B
Correct Answer
Answer B is correct because Sideloading means installation of software from a source outside the approved application distribution mechanism. That is the function the question is testing. SQL injection would instead be used for injection of attacker-controlled SQL syntax into an application’s database query.
Incorrect Answers
Answer A is incorrect because Cryptographic vulnerability refers to a weakness caused by broken algorithms, poor key handling, weak parameters, or incorrect cryptographic implementation. The key mismatch is functional: Sideloading addresses installation of software from a source outside the approved application distribution mechanism, the need stated by the question.
Answer C is incorrect because Jailbreaking refers to removing vendor-imposed restrictions on a mobile device or operating system. The question is not asking for this function. It is testing installation of software from a source outside the approved application distribution mechanism, so Sideloading is the stronger fit.
Answer D is incorrect because SQL injection refers to injection of attacker-controlled SQL syntax into an application’s database query. The concept is valid, but it does not match this stem. The required function is installation of software from a source outside the approved application distribution mechanism, which maps to Sideloading.
Question 18
To execute attacker-controlled behavior inside an existing process, which security approach should be selected?
- Memory injection
- Race condition
- Sideloading
- VM escape
Correct Answer: A
Correct Answer
Answer A is correct because Memory injection means placing malicious code or data into the memory space of a running process. That is the function the question is testing. Sideloading would instead be used for installation of software from a source outside the approved application distribution mechanism.
Incorrect Answers
Answer B is incorrect because Race condition refers to a flaw in which security depends on the timing or ordering of concurrent operations. The concept is valid, but it does not match this stem. The required function is placing malicious code or data into the memory space of a running process, which maps to Memory injection.
Answer C is incorrect because Sideloading refers to installation of software from a source outside the approved application distribution mechanism. That concept can be valid in another scenario, but this question is testing placing malicious code or data into the memory space of a running process; Memory injection therefore fits the requirement more directly.
Answer D is incorrect because VM escape refers to a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. The scenario instead requires placing malicious code or data into the memory space of a running process, which is why Memory injection is the better answer; this option serves the different function defined above.
Question 19
To abuse the update process to distribute malicious code, which security approach should be selected?
- VM escape
- Malicious update
- Operating-system vulnerability
- Legacy-system vulnerability
Correct Answer: B
Correct Answer
Answer B is correct because Malicious update means a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism. That is the function the question is testing. Operating-system vulnerability would instead be used for a weakness in the operating system kernel, service, driver, or security configuration.
Incorrect Answers
Answer A is incorrect because VM escape refers to a virtualization flaw that allows code in a guest virtual machine to affect the hypervisor or another isolation boundary. The concept is valid, but it does not match this stem. The required function is a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism, which maps to Malicious update.
Answer C is incorrect because Operating-system vulnerability refers to a weakness in the operating system kernel, service, driver, or security configuration. That concept can be valid in another scenario, but this question is testing a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism; Malicious update therefore fits the requirement more directly.
Answer D is incorrect because Legacy-system vulnerability refers to risk introduced by old technology that must remain in service despite outdated security capabilities. The key mismatch is functional: Malicious update addresses a compromised or intentionally harmful software or firmware update delivered through a trusted update mechanism, the need stated by the question.
Question 20
Reviewers working through a vulnerability analysis identify three separate needs: placing malicious code or data into the memory space of a running process; flaw in which security depends on the timing or ordering of concurrent operations; injection of attacker-controlled SQL syntax into an application’s database query. Which THREE choices map to those needs? Choose THREE.
- Resource reuse
- Memory injection
- Cloud-specific vulnerability
- SQL injection
- Zero-day vulnerability
- Race condition
Correct Answers: B, D, F
Correct Answers
Answer B is correct because Memory injection means placing malicious code or data into the memory space of a running process. This selection maps directly to one of the named needs. Cloud-specific vulnerability addresses a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration, so it does not satisfy the same slot.
Answer D is correct because SQL injection means injection of attacker-controlled SQL syntax into an application’s database query. This option satisfies a specific requirement in the stem; Cloud-specific vulnerability serves a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration and therefore is not interchangeable with it.
Answer F is correct because Race condition means a flaw in which security depends on the timing or ordering of concurrent operations. It belongs in the fixed-count answer set because it covers one of the stated requirements. Resource reuse instead serves risk that residual data from a previous user or workload remains accessible when memory or storage resources are reassigned and cannot replace this function.
Incorrect Answers
Answer A is incorrect because Resource reuse means risk that residual data from a previous user or workload remains accessible when memory or storage resources are reassigned. The question requires exactly 3 selections: Memory injection, SQL injection, Race condition. This option falls outside that required set.
Answer C is incorrect because Cloud-specific vulnerability means a weakness tied to cloud design, permissions, exposed services, shared responsibility, or service configuration. Every answer slot must map to a stated requirement. The correct set is Memory injection, SQL injection, Race condition, so this option cannot replace one of those selections.
Answer E is incorrect because Zero-day vulnerability means a vulnerability for which defenders do not yet have a broadly available fix or may have little warning before exploitation. The fixed-count answer set is Memory injection, SQL injection, Race condition; this option does not fill one of those named functions.
