In web application security, what does the term vulnerability stack refer to?

Question

Options

• AA hierarchy of database permissions
• BThe layered structure of software vulnerabilities within an application
• CA stack data structure used in memory management
• DA browser-side scripting framework

• A
  2% (1)
• B
  93% (50)
• C
  2% (1)
• D
  4% (2)

Explanation

Vulnerability stack refers to the layered structure of security weaknesses that exist across the different layers of a web application - from the OS and runtime environment, through the web server, application framework, and business logic, up to the client-side code. Option B is correct because modern applications are built in stacked layers, and vulnerabilities can exist at any layer, often compounding each other (e.g., a misconfigured server exposing an unpatched framework running vulnerable application code).

Why the distractors are wrong:

• A is wrong - database permission hierarchies are a specific access control concept, not a security term for layered vulnerabilities.
• C is wrong - a stack data structure (LIFO memory management) is a computer science concept; while stack-based buffer overflows are real attacks, "vulnerability stack" doesn't describe this.
• D is wrong - no browser-side scripting framework goes by this name; this is a fabricated distractor.

Memory tip: Think of a building with multiple floors - each floor is an application layer (OS, server, app, client), and a "vulnerability stack" means there are weaknesses on multiple floors. An attacker who chains them together can reach the top (full compromise). "Stack = layers, vulnerabilities = weaknesses on each layer."

No community discussion yet for this question.