CCST Attacks and Threats - Chapter 19

What is the first thing any attacker attempts to set up once initial access is achieved?

• Lateral movement

• C2

• Ransomware setup

• Reflection

__________ can be used to assemble authentic-looking documents, such as emails; an attacker can use them to fool users.

• LPUs

• LLMs

• PTRs

• RMUs

Tailgating another person walking into a corporate office is an example of what?

• Social engineering

• Social duplication

• Social experimentation

• Social designing

In a network, the __________ includes the points in a network that connect to the Internet, an external system, or any place where it attaches to users.

• attack area

• attack zone

• attack surface

• attack square

If an attacker sends a series of DNS queries fast enough to fill a recursive server’s cache, what attack is it considered?

• Man-in-the-middle attack

• Social engineering attack

• Resource exhaustion

• Supply chain attack

What is the name of the system used to classify information technology vulnerabilities?

• CRE

• RPO

• RMA

• CVE

Which type of attack occurs when a third-party device is logically inserted into a forwarding path to steal information?

• Man-in-the-middle attack

• Denial-of-service attack

• Social engineering attack

• Supply chain attack

A 2013 target attack where data centers were breached using their point of sale (PoS) systems is an example of which type of attack?

• Social engineering attack

• Denial-of-service attack

• Man-in-the-middle attack

• Supply chain attack