Domains 1-2 Sec+

A hacker at CyberThreat Inc. sends an email with a malicious link that, when clicked, downloads malware onto the victim's system. What type of attack is this?

• SQL Injection

• Phishing

• Man-in-the-middle

• Cross-site scripting

Answer explanation

The attack described is phishing, where a hacker sends a malicious link via email to trick the victim into downloading malware. This method exploits social engineering to gain unauthorized access.

Which of the following is an administrative control?

• Antivirus software

• Security awareness training

• Biometric authentication

• Intrusion prevention system

Answer explanation

Security awareness training is an administrative control that focuses on educating employees about security policies and practices, helping to mitigate risks through informed behavior. The other options are technical controls.

Which type of threat intelligence provides real-time alerts about current attack trends?

• Tactical

• Strategic

• Operational

• Technical

Answer explanation

Tactical threat intelligence focuses on immediate threats and provides real-time alerts about current attack trends, helping organizations respond quickly to emerging threats.

What makes a zero-day vulnerability especially dangerous?

• It can only be exploited in specific conditions

• It is patched within 24 hours

• It has no available fix at the time of discovery

• It only affects open-source software

Answer explanation

A zero-day vulnerability is especially dangerous because it has no available fix at the time of discovery, leaving systems exposed to potential attacks until a patch is developed and deployed.

Which security framework is commonly used for managing risk in U.S. government organizations?

• ISO 27001

• NIST Cybersecurity Framework

• PCI DSS

• ITIL

Answer explanation

The NIST Cybersecurity Framework is specifically designed for U.S. government organizations to manage and reduce cybersecurity risk, making it the correct choice over ISO 27001, PCI DSS, and ITIL.

SecureBank Ltd. detects multiple failed login attempts from different IP addresses on an employee account. Which attack is likely occurring?

• Phishing

• Brute force attack

• SQL Injection

• DNS Spoofing

Answer explanation

Multiple failed login attempts from different IP addresses suggest a brute force attack, where an attacker tries various passwords to gain unauthorized access. This aligns with the observed behavior.

An attacker at DataSafe Inc. exploits a software bug to gain administrator rights on a system. What type of attack is this?

• SQL Injection

• Privilege Escalation

• Cross-site scripting

• Session Hijacking

Answer explanation

The attacker exploits a software bug to gain higher privileges, which is known as privilege escalation. This type of attack allows unauthorized users to gain access to restricted areas of a system.

A hidden program at TechSecure Corp. records keystrokes and sends them to an attacker. What type of malware is this?

• Rootkit

• Ransomware

• Keylogger

• Worm

Answer explanation

The malware described records keystrokes, which is a characteristic function of a keylogger. Unlike rootkits, ransomware, or worms, keyloggers specifically capture user input to send to an attacker.

Which attack involves inserting malicious SQL statements into a web form to access a database?

• Cross-Site Scripting (XSS)

• SQL Injection

• DNS Poisoning

• Session Hijacking

Answer explanation

SQL Injection is an attack where malicious SQL statements are inserted into a web form, allowing attackers to manipulate or access the database. This distinguishes it from other attacks like XSS, DNS Poisoning, and Session Hijacking.

What security method should XYZ Wireless Corp. use to prevent evil twin attacks?

• WPA2-PSK

• VPN

• Captive portal

• MAC filtering

Answer explanation

A VPN encrypts data and secures connections, making it difficult for attackers to intercept communications, thus effectively preventing evil twin attacks. Other methods like WPA2-PSK and MAC filtering do not provide the same level of protection.