CompTIA Security+ (1.1 to 1.2)

What kind of attack can we use with botnets?

• ARP poisoning

• DOS

• Shoulder surfing

• DDOS

A password attack that only use a "wordlist" file to attack is called

• Bruteforce

• Dictionary

• Spraying

• Rainbow table

We should not use hashing for our password text files

• True

• False

Once infected, the bot wait for the instruction from where

• Network

• User

• DNS server

• C&C server

Trying every possible password combination is called

• Tailgating attack

• Dictionary attack

• Brute force attack

• Spraying attack

How many kinds of Logic bombs?

• 3

• 2

• 1

• 5

In a watering hole attack, which source is used as a hostage by the attackers to attack their target.

• Third party network

• USB flash drive

• A restaurant

• Target computers

In Supply Chain attacks, attackers need to attack all parts of the chain to achieve the attack

• True

• False

Answer explanation

The image above is a

• Brute froce attack

• Dictionary attack

• Spraying attack

• Hash attack

In which of the following social engineering attack, the attacker threaten the victim to achieve the attack?

• Intimidation

• Familiarity

• Urgency

• Social proof