Networking Vulnerbilities and Security

A company experiences an attack where their customer service system becomes completely unresponsive due to overwhelming traffic from multiple sources. Which type of attack is this most likely to be?

• Phishing attack

• Distributed Denial of Service (DDoS) attack

• Man-in-the-middle attack

• Ransomware attack

What makes fileless malware particularly challenging to detect compared to traditional malware?

• It requires a larger network bandwidth

• It only targets specific types of files

• It operates in memory and uses legitimate system tools

• It encrypts all system files immediately

In the context of risk management, which sequence represents the correct order of steps?

• Identify risks, assess likelihood, implement controls, monitor effectiveness

• Implement controls, identify risks, monitor effectiveness, assess likelihood

• Monitor effectiveness, implement controls, assess likelihood, identify risks

• Assess likelihood, monitor effectiveness, identify risks, implement controls

A company receives an email appearing to be from their bank requesting urgent account verification. This is most likely what type of attack, and why is it potentially dangerous?

• DoS attack - because it could overload the email server

• Phishing attack - because it attempts to steal sensitive information by appearing legitimate

• Malware attack - because it contains a virus

• Ransomware attack - because it will encrypt the company's files

Which combination of security measures would provide the most comprehensive protection against modern threats?

• Strong passwords and antivirus software only

• Firewall and encryption only

• Regular updates and employee training only

• Firewall, encryption, regular updates, employee training, and multi-factor authentication

When implementing an Intrusion Detection System (IDS), why might an organization choose to use both network-based and host-based systems?

• To provide redundant layers of protection and catch different types of threats

• To reduce the overall cost of security implementation

• To comply with basic security standards

• To simplify the network architecture

In the context of ransomware attacks, why do attackers typically demand payment in cryptocurrency?

• Because it's easier to process large transactions

• Because it provides anonymity and is difficult to trace

• Because it's the most stable form of currency

• Because it's the fastest payment method

Which of the following best represents the concept of "zero-trust architecture" in network security?

• Trusting all internal network traffic automatically

• Only verifying external connections

• Blocking all network access by default

• Verifying every user and device, regardless of location

A security analyst discovers that sensitive data is being leaked from within the organization. Which combination of factors should they investigate first?

• External hackers and firewall configurations

• System updates and patch management

• Insider threats and access control logs

• Network bandwidth and router settings

Why is multi-factor authentication considered more secure than traditional password-only systems?

• Because it requires multiple independent verification methods

• Because it's faster to implement

• Because it's cheaper to maintain

• Because it only needs to be updated annually