ETHICAL HACKING AND PENETRATION TESTING PERFORM PENETRATION TESTING
TO IDENTIFY AND EXPLOIT VULNERABILITIES IN SYSTEMS AND NETWORKS ETHI-
CALLY
1. Question: In a SQL Injection attack scenario, if an attacker successfully retrieves 10 records from a
database using the injection vulnerability, how many records will the attacker be able to retrieve if they
modify the attack to fetch all the records from the database?
Solution: In SQL Injection attacks, attackers exploit vulnerabilities in a web application to manipulate
an SQL query so that they can retrieve unauthorized data from the database. If the attacker can fetch 10
records using the injection, it indicates that the query can be manipulated to display more data.
To fetch all the records from the database, the attacker can modify the SQL query to remove any restric-
tions and fetch all data. This can be achieved by modifying the query to retrieve all rows from the table by
using a wildcard character such as ’*’.
If the attacker was able to fetch 10 records initially, and now modifies the query to fetch all records, the
attacker will be able to retrieve all records stored in the database. Therefore, the attacker will be able to
retrieve all the records, which could be any number depending on the database size.
Final Answer: All records present in the database.
2. Question: In a social engineering attack during penetration testing, an attacker gains access to a target
system by pretending to be an IT technician. The attacker convinces an employee to provide their login
credentials over the phone. If the attacker successfully obtains access to the system and extracts sensitive
data within 15 minutes, what is the efficiency rate of this social engineering attack?
Solution: Efficiency rate = (Number of successful attacks / Total number of attacks) x 100
Let’s assume the attacker attempted this social engineering attack on 10 employees. Out of those, the
attacker successfully gained access to the system and extracted sensitive data from 5 employees.
Efficiency rate = (5 / 10) x 100 Efficiency rate = 0.5 x 100 Efficiency rate = 50
Therefore, the efficiency rate of this social engineering attack is 50
3. Question: During a penetration test, an ethical hacker successfully exploits a misconfigured web
application to gain unauthorized access to a server. The hacker discovers that the server is running an
outdated version of Apache Tomcat, which has a known vulnerability. The vulnerability allows the hacker to
execute remote code execution attacks. If the Apache Tomcat version in question is 7.0.82 and the specific
vulnerability being exploited exists in versions up to 7.0.81, what is the Common Vulnerability Scoring
System (CVSS) score for this vulnerability?
Solution: To find the CVSS score for the vulnerability, we need to refer to the National Vulnerability
Database (NVD) or Common Vulnerabilities and Exposures (CVE) information. In this case, since the
vulnerability exists in versions up to 7.0.81, let’s assume the CVE identifier for this specific vulnerability is
CVE-XXXX-XXXX (a hypothetical identifier for the sake of this question).
Looking up the CVE-XXXX-XXXX in the NVD or CVE details will provide information on the Base
Score, Temporal Score, and Environmental Score. The Base Score typically includes metrics like Attack
Vector, Attack Complexity, Privileges Required, User Interaction, Scope, etc., which collectively contribute
to determining the severity of the vulnerability.
Let’s assume that the Base Score for our hypothetical CVE-XXXX-XXXX is 9.8 (which indicates a
critical vulnerability). This means the vulnerability is severe, and exploitation could lead to significant
impact.
Therefore, the Common Vulnerability Scoring System (CVSS) score for this vulnerability would be 9.8.
4. Question: In a SQL injection attack on a web application, if an attacker successfully retrieves 10
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
records from a database table, how many SQL queries might have been executed to achieve this?
Solution: In a SQL injection attack, the attacker injects malicious SQL code into input fields of a web
application to manipulate the database. Each record retrieved in a SQL query would require a separate query
to be executed. Therefore, if the attacker retrieved 10 records from a database table, it indicates that 10 SQL
queries were executed to achieve this.
Final numerical answer: 10
5. Question: In a penetration testing exercise, a cybersecurity professional discovered an IoT device with
a default username and password combination. The device has the manufacturer-set credentials "admin" and
"1234". If the attacker successfully exploits this vulnerability, what is the risk rating (on a scale of 1 to 10)
assigned to this finding according to the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution:
To determine the risk rating of a vulnerability using the CVSS 3.0 metrics, several factors are considered
such as the exploitability, impact, and the environment in which the vulnerability exists.
For the given scenario with the default credentials "admin" and "1234" on the IoT device, the CVSS
base score will likely consider factors like Attack Vector, Attack Complexity, Privileges Required, User
Interaction, Scope, and Impact metrics to calculate the overall severity rating.
Based on the CVSS metric scores for these factors, the vulnerability of default credentials on IoT devices
is typically rated with a high severity level. This is due to the ease of exploitation and the potential impact of
unauthorized access to the device. The risk rating for this scenario would be on the higher end of the scale,
often falling in the range of 7 to 10.
Therefore, the risk rating for the discovered default credentials vulnerability on the IoT device with
"admin" and "1234" would be around 9 on a scale of 1 to 10.
6. Question: In a social engineering attack during penetration testing, a hacker sends out 100 phishing
emails. If 10 recipients click on the malicious links included in the emails, what is the click-through rate
(CTR) for this attack?
Solution: Click-through rate (CTR) is calculated by taking the number of clicks on a specific link divided
by the total number of times that link was shown or sent (in this case, the number of phishing emails sent).
CTR = (Number of clicks / Number of emails sent) * 100
Given: Number of phishing emails sent = 100 Number of recipients that clicked on the link = 10
Plugging the values into the formula: CTR = (10 / 100) * 100CTR = 0.1 * 100CTR = 10
Therefore, the click-through rate (CTR) for this social engineering attack during penetration testing is
10
7. Question: In a social engineering attack during penetration testing, a hacker sends 100 phishing
emails. Out of those, 20 recipients clicked on the malicious link included in the email. What is the click-
through rate of this phishing campaign?
Solution: The click-through rate is calculated by dividing the number of clicks by the total number of
emails sent, then multiplying by 100 to get the percentage.
Click-through rate = (Number of clicks / Total number of emails sent) * 100 Click-through rate = (20 /
100) * 100 Click-through rate = 0.2 * 100 Click-through rate = 20
Therefore, the click-through rate of this phishing campaign is 20
8. Question: In a penetration test on a web application, an SQL injection vulnerability was identi-
fied allowing an attacker to retrieve sensitive data from the database. The attacker successfully extracted
5000 records from the database. Each record contained 10 fields of data. How many data elements were
compromised in total?
Solution: Given that there were 5000 records extracted and each record contained 10 fields of data, we
can calculate the total number of data elements compromised by multiplying the number of records by the
number of fields in each record.
Total data elements compromised = Number of records * Number of fields per record Total data elements
compromised = 5000 records * 10 fields per record Total data elements compromised = 50000 data elements
Therefore, in this penetration test scenario, a total of 50,000 data elements were compromised.
9. Question: In a SQL injection attack scenario, if the database query has been manipulated to display
all records from a table, and there are a total of 150 records in that table, how many records will be displayed
as a result of the injection?
Solution: In a SQL injection attack, when the query is manipulated to display all records from a table, it
usually involves using wildcard characters or specific SQL commands like ’OR 1=1’. If there are 150 records
in the table, the injection will display all records in the table, resulting in 150 records being displayed as a
result of the injection.
Therefore, the numerical answer is 150.
10. Question: In a penetration testing scenario, a remote code execution (RCE) vulnerability allows an
attacker to execute arbitrary code on a target system. If the attacker successfully exploits this vulnerability,
gaining full control over the target system, and exfiltrates sensitive data, what should the impact rating be
based on the Common Vulnerability Scoring System (CVSS) version 3.0?
Solution: The Common Vulnerability Scoring System (CVSS) version 3.0 provides a method to assess
and rate the severity of vulnerabilities. The impact rating is based on the confidentiality, integrity, and
availability (CIA) triad, ranging from 0 to 10.
For a remote code execution (RCE) vulnerability that allows an attacker to execute arbitrary code on
the target system and potentially gain full control, the impact rating would be as follows: - Confidentiality
Impact: High (score of 7 to 10) - The attacker can exfiltrate sensitive data. - Integrity Impact: High (score
of 7 to 10) - The attacker can modify critical system files or data. - Availability Impact: High (score of 7 to
10) - The attacker can disrupt the availability of the system or service.
Considering that the attacker can execute arbitrary code, gain full control, exfiltrate sensitive data, mod-
ify system files, and disrupt system availability, the impact rating for this scenario would be the highest score
of 10 for each of the three aspects (confidentiality, integrity, and availability).
Therefore, the impact rating for the scenario of successfully exploiting an RCE vulnerability to gain full
control over the system and exfiltrate sensitive data would be: Confidentiality Impact: 10 Integrity Impact:
10 Availability Impact: 10
The final numerical answer is 10 for each aspect, resulting in a maximum impact rating of 10 in terms
of CVSS version 3.0 severity scoring.
11. Question: In a web application penetration test, a security researcher successfully exploited a SQL
injection vulnerability to extract sensitive information from the database. If the researcher could access 500
records per minute and there were a total of 10,000 records in the database, how many minutes would it take
to extract all the records?
Solution:
To calculate the time required to extract all records, we divide the total number of records by the number
of records accessed per minute:
Time (minutes) = Total number of records / Records accessed per minute Time (minutes) = 10,000 / 500
Time (minutes) = 20 minutes
Therefore, it would take the security researcher 20 minutes to extract all 10,000 records from the
database.
12. Question: In a social engineering attack during a penetration testing exercise, an attacker sends 150
phishing emails to employees of a company. If 20 employees clicked on the malicious link in the email,
what is the click-through rate (CTR) of this phishing campaign?
Solution: Click-through rate (CTR) is calculated by dividing the number of clicks on a link by the
number of emails sent, then multiplying by 100 to get the percentage.
CTR = (Number of clicks / Number of emails sent) * 100
In this case, Number of clicks = 20 and Number of emails sent = 150.
CTR = (20 / 150) * 100 CTR = (0.1333) * 100 CTR 13.33
Therefore, the click-through rate of this phishing campaign is approximately 13.33
13. Question: During a social engineering attack in a penetration test, an ethical hacker successfully
tricked 7 employees into revealing their passwords. If the company has a total of 50 employees, what
percentage of employees fell victim to this attack?
Solution: To find the percentage of employees affected by the social engineering attack, we first calculate
the number of employees who disclosed their passwords: Number of employees affected = 7
Next, we determine the total number of employees in the company: Total number of employees = 50
Now, we calculate the percentage of affected employees: Percentage of affected employees = (Number
of affected employees / Total number of employees) * 100 Percentage of affected employees = (7 / 50) *
100 Percentage of affected employees = 0.14 * 100 Percentage of affected employees = 14
Therefore, 14
14. Question: During a social engineering attack as part of penetration testing, an attacker success-
fully tricks 8 out of 10 employees into revealing their passwords. What is the success rate of this social
engineering attack in percentage?
Solution:
The success rate of the social engineering attack can be calculated by dividing the number of employees
tricked into revealing their passwords by the total number of employees targeted and then multiplying by
100 to get the percentage.
Success rate = (Number of employees tricked / Total number of employees) * 100 Success rate = (8 /
10) * 100 Success rate = 0.8 * 100 Success rate = 80
Therefore, the success rate of the social engineering attack is 80
15. Question: During a social engineering attack, an attacker successfully convinces 8 employees to
disclose their passwords by pretending to be a new IT technician. If each password has an average strength
of 10 characters, how many total characters did the attacker potentially gain access to?
Solution: First, we calculate the total number of characters the attacker could have potentially gained
access to by multiplying the number of employees (8) by the average password length (10 characters):
Total characters = 8 employees * 10 characters/employee Total characters = 80 characters
Therefore, the attacker potentially gained access to 80 characters of password information.
16. Question: During a social engineering penetration test, an attacker sends a phishing email to 150
employees within a company. Out of these, 30 employees click on the malicious link provided in the email.
What is the success rate of this phishing attack in percentage?
Solution: The success rate of the phishing attack can be calculated using the formula: (Number of
employees who clicked on the malicious link / Total number of employees targeted) * 100
Plugging in the values: (Number of employees who clicked on the malicious link) = 30 (Total number
of employees targeted) = 150
Success Rate = (30 / 150) * 100 Success Rate = 0.2 * 100 Success Rate = 20
Therefore, the success rate of this phishing attack is 20
17. Question: In a social engineering attack during penetration testing, a hacker sends out a phishing
email to 100 employees. If 20 employees click on the malicious link within the email, what is the click-
through rate percentage?
Solution:
Click-through rate percentage can be calculated using the formula: Click-through rate (
Given: Number of clicks = 20 Number of emails sent = 100
Substitute the given values into the formula: Click-through rate (Click-through rate (Click-through rate
(
Therefore, the click-through rate percentage in this social engineering attack is 20
18. Question: In a web application, an attacker successfully injects a malicious script that steals user
cookies through a Cross-Site Scripting (XSS) vulnerability. If the attacker manages to harvest cookies from
100 users and each cookie contains an average of 20 characters, how many characters would the attacker
potentially access in total?
Solution: To calculate the total number of characters the attacker could potentially access, we need to
multiply the number of users whose cookies were harvested by the average number of characters in each
cookie.
Total characters = Number of users * Average characters per cookie Total characters = 100 users * 20
characters/user Total characters = 2000 characters
Therefore, the attacker could potentially access 2000 characters in total by harvesting cookies from 100
users.
19. Question: During a penetration test, an ethical hacker discovers a web application vulnerable to SQL
injection. The hacker successfully retrieves sensitive data from the database by exploiting this vulnerability.
If the database contains 1000 records and the hacker manages to retrieve 500 records, what is the percentage
of data successfully extracted in this attack?
Solution: The formula for calculating percentage is: (Part / Total) * 100
Given: - Total number of records in the database: 1000 - Number of records retrieved by the hacker: 500
Percentage of data successfully extracted: = (500 / 1000) * 100 = 0.5 * 100 = 50
Therefore, the percentage of data successfully extracted in this SQL injection attack is 50
20. Question: In a wireless network penetration testing scenario, a hacker discovers a WPA2-PSK
encrypted network using a weak password. The hacker uses a brute force attack to crack the password,
which consists of lowercase letters and numbers only. Assuming the hacker can try 1000 passwords per
second, how long will it take to crack a password that is 8 characters long?
Solution: WPA2-PSK uses a strong encryption algorithm, but if the password is weak, it can be suscep-
tible to brute force attacks. In this case, we assume the hacker can try 1000 passwords per second.
To calculate the number of possible combinations for an 8-character password that consists of lowercase
letters (26 possibilities) and numbers (10 possibilities), we use the formula:
Total possible combinations = (number of possible characters)(passwordlength)T otalpossiblecombinations =
(26lowercaseletters + 10numbers)(8)T otalpossiblecombinations = 368= 2,821,109,907,456
Next, we determine how long it will take to try all possible combinations at a rate of 1000 passwords
per second:
Time to crack password = Total possible combinations / Passwords per second Time to crack password
= 2,821,109,907,456 / 1000 seconds Time to crack password 2,821,109,907 seconds
Converting seconds to hours: 2,821,109,907 seconds / 3600 seconds per hour 783,641 hours
Therefore, it will take approximately 783,641 hours to crack an 8-character password consisting of
lowercase letters and numbers using a brute force attack at a rate of 1000 passwords per second.
21. Question: During a penetration testing engagement, a social engineer successfully convinced 15 out
of 30 employees to divulge their passwords. What is the success rate of the social engineering attack in
percentage?
Solution: Success Rate = (Number of Employees Convinced / Total Number of Employees) * 100
Success Rate = (15 / 30) * 100 Success Rate = 0.5 * 100 Success Rate = 50
Therefore, the success rate of the social engineering attack in this scenario is 50
22. Question: In a penetration testing scenario, a web application is found to be vulnerable to SQL
injection. The tester successfully retrieves sensitive data from the database using a UNION-based SQL
injection attack. If the database contains 10 tables and the sensitive data is retrieved from the 5th table
through the UNION statement, what index number will be used in the UNION statement?
Solution: In a UNION-based SQL injection attack, the UNION statement is used to combine the result
sets of two or more SELECT statements. Each SELECT statement must have the same number of columns
and data types.
In this scenario, since the sensitive data is retrieved from the 5th table in the database through the UNION
statement, the index number used in the UNION statement will be ’5’.
Therefore, the numerical answer is: 5
23. Question: In a penetration testing scenario, a software application is vulnerable to a buffer overflow
attack. The buffer size is 100 bytes, and the attacker successfully overflows the buffer with 120 bytes of
malicious code. How many bytes will overflow beyond the allocated buffer size?
Solution: The buffer size is 100 bytes, and the attacker injects 120 bytes of malicious code, which
exceeds the allocated buffer size. To calculate the number of bytes that will overflow beyond the allocated
buffer size, we subtract the buffer size from the injected bytes:
Number of bytes overflowing = Injected bytes - Buffer size Number of bytes overflowing = 120 bytes -
100 bytes Number of bytes overflowing = 20 bytes
Therefore, in the given buffer overflow scenario, 20 bytes will overflow beyond the allocated buffer size.
24. Question: During a social engineering penetration test, an ethical hacker successfully tricked three
employees into providing their login credentials by posing as IT support. If each compromised account is
valued at 500forpotentialdamages, whatisthetotalestimatedfinancialimpactof thissocialengineeringattack?
Solution: Number of compromised accounts = 3 Value of each compromised account = 500
Total estimated financial impact = Number of compromised accounts * Value of each compromised
account Total estimated financial impact = 3 * 500T otalestimatedfinancialimpact =1500
Therefore, the total estimated financial impact of this social engineering attack is 1500.
25. Question: In a social engineering attack, an attacker sends out 100 phishing emails. Out of those,
20 recipients click on the malicious link in the email. What is the click-through rate (CTR) of this phishing
campaign?
Solution: The click-through rate (CTR) is calculated by taking the total number of clicks divided by the
total number of emails sent, then multiplied by 100 to get a percentage.
CTR = (Number of Clicks / Number of Emails Sent) * 100
Given: Number of emails sent = 100 Number of clicks = 20
Plugging in the values: CTR = (20 / 100) * 100 CTR = 0.2 * 100 CTR = 20
Therefore, the click-through rate (CTR) of this phishing campaign is 20
