Security+ Final Exam Quizizz

Which type of threat actor would benefit the most from accessing your enterprise's new machine learning algorithm research and development program?

• Shadow IT

• Brokers

• Criminal Syndicates

• Competitors

Your enterprise has played fast and loose with customer information for years. While there has been no significant breach of information that could damage the organization and/or their customers, many in the enterprise feel it is only a matter of time before a major leak occurs.

Which type of threat actor is an employee who wishes to personally ensure that the enterprise is exposed and blocked from accessing their customers' information until they ensure more secure protocols?

• Hacktivist

• Insider

• State actor

• Script kiddy

Your company recently purchased routers with new and updated features and deployed them in the highly secure enterprise network without changing the default settings. A few days later, the enterprise network suffered a data breach, and you are assigned to prepare a report on the data breach. Which of the following vulnerabilities should you identify as the source of the breach?

• Platform vulnerability

• Configuration vulnerability

• Third-party vulnerability

• Zero-day vulnerability

Khalid joins a security team where he is assigned an SOC developer role and has to build different teams under SOC. Which of the following teams should he build to deal with providing real-time feedback related to security incidents and threat detections, which can then be utilized to facilitate better prioritization of threats and a mature way of detecting threats?

• Red team

• Blue team

• Purple team

• White team

Which of the following penetration testing consultants have limited knowledge of the network and some elevated privileges?

• Gray box

• White box

• Black Box

• Bug bounty

Which operation is carried out by proactively searching security logs for cyber threats that have thus far gone undetected?

• Threat hunting

• Vulnerability hunting

• Vulnerability scanning

• Data hunting

Juan, a cybersecurity expert, has been hired by an organization whose networks have been compromised by a malware attack. After analyzing the network systems, Juan submits a report to the company mentioning that the devices are infected with malware that uses a split infection technique on files.

Which malware attack is Juan reporting?

• Cryptomalware

• Virus

• Spyware

• RAT

Shanise is an IT security professional for a large private bank. She got an alert that the bank website received a funds transfer request that was correctly credentialed but flagged as being out of the account owner's usual pattern. If the alert is correct, what type of attack has likely occurred?

• CSRF attack

• Replay attack

• XSS attack

• SQL injection

What is another term commonly used to define cross-site request forgery (CSRF):

• Server-side request forgery

• Client-side request forgery

• Client-server request forgery

• Cross-server request forgery

While going through the network log, Sarah, a network security administrator, noticed substantial outbound network traffic. Which activity did Sarah perform?

• STIX

• IOC

• Telnet

• HTTP