24. Watering Hole Attack Quiz

What is one method attackers use to gain access to a network through physical means?

• Using social engineering

• Hacking into Wi-Fi networks

• Leaving USB keys in parking lots

• Sending phishing emails

Why is it important to train employees not to plug in unknown USB keys?

• To keep the USB ports clean

• To save energy

• To prevent physical damage to the computer

• To avoid installing malicious software

What is a watering hole attack?

• An attack where the attacker uses social engineering

• An attack where the attacker sends phishing emails

• An attack where the attacker poisons a commonly visited site

• An attack where the attacker hacks into Wi-Fi networks

What do attackers need to do before executing a watering hole attack?

• Understand the target's daily routine

• Hack into the target's email

• Gain physical access to the target's office

• Steal the target's credentials

In the example from January 2017, which organizations were targeted?

• Financial institutions

• Tech companies

• Healthcare providers

• Educational institutions

What type of files did the attackers add to the web servers in the 2017 example?

• Phishing emails

• Malicious JavaScript files

• Ransomware

• Spyware

How did the attackers in the 2017 example ensure they targeted specific organizations?

• By hacking into their Wi-Fi

• By sending targeted emails

• By using social engineering

• By using specific IP addresses

What is the term used for having multiple layers of security?

• Perimeter security

• Network isolation

• Defense in depth

• Single-layer defense

Which security measure can recognize malicious content in network traffic?

• Spam filter

• Antivirus

• Firewall

• Intrusion Prevention System (IPS)

What message would users with specific IP addresses and using Semanex antivirus software receive?

• Malicious code detected

• Connection timed out

• File not found

• Access denied