ACS - Threats, Vulnerabilities, & Mitigation - Overview

Which of the following best defines a nation-state threat actor?

• An individual hacker motivated by personal revenge

• A government-sponsored group conducting cyberattacks

• A criminal organization focused on financial gain

• An insider with access to sensitive data

What is a common motivation for script kiddies?

• Espionage

• Financial gain

• Desire for recognition among peers

• Political beliefs

Which of the following is a physical security control?

• Firewall

• Biometric scanner

• Encryption

• Two-factor authentication

What does the acronym AAA stand for in cybersecurity?

• Authenticate, Authorize, Account

• Access, Audit, Assess

• Analyze, Alert, Adapt

• Attack, Alert, Announce

A company's website is targeted by a DDoS attack. What is the primary goal of this type of attack?

• Theft of customer data

• Service disruption

• Insertion of malware

• Espionage

Which of the following best describes the motivation behind a financial gain-driven attack?

• Espionage

• Service Disruption

• Blackmail

• Data Exfiltration

What is a common mitigation strategy against a Distributed Denial of Service (DDoS) attack?

• Installing a firewall

• Applying multi-factor authentication

• Using load balancers and traffic filtering

• Deploying endpoint protection software

Which of the following best describes a vulnerability that an attacker might exploit in a system?

• A weakness that could allow unauthorized access or damage

• A tool used by a threat actor

• A security measure implemented to prevent attacks

• A type of motivation for an attacker

Which of the following would most likely be used by an Insider Threat?

• Social engineering tactics against external parties

• Exploiting known system vulnerabilities for financial gain

• Using their authorized access to steal sensitive data

• Conducting DDoS attacks to disrupt a company’s services

A threat actor who uses a system's vulnerabilities for political reasons is known as a:

• Nation-State

• Hacktivist

• Unskilled Attacker

• Insider Threat