Hero

Which activity involves the use of Open-Source Intelligence (OSINT)?

• Social engineering testing

• Data analysis of logs

• Collecting evidence of malicious activity

• Producing IOC for malicious artifacts

Before granting application access to contractors and employees, what risk element should the implementation team evaluate?

• Threshold

• Appetite

• Avoidance

• Register

An attacker discovers a user's password by analyzing patterns in old password dumps. What type of attack is this?

• A. Dictionary

• B. Brute-force

• C. Credential stuffing

• D. Rainbow table

A cybersecurity analyst detects traffic coming from a single internal host with multiple destination ports on a single external IP. What’s most likely happening?

• A. DNS poisoning

• B. Port scanning

• C. MAC spoofing

• D. URL redirection

A user receives an email that appears to come from their IT department asking them to reset their password. What’s this attack called?

• Phishing

• Impersonation

• Smishing

• Vishing

What is the purpose of salting passwords before storing them in a database?

• To speed up hash comparisons

• To prevent rainbow table attacks

• To lengthen the hash value

• To comply with password reuse policies