Security+ Lesson 2 Quiz

Which of the following is an example of a nation-state actor’s motivation?

• Financial gain

• Political advantage

• Accidental misconfiguration

• Script kiddie fame

What is the key characteristic of an Advanced Persistent Threat (APT)?

• One-time phishing attempt

• Short-term system scan

• Long-term stealthy access

• Random ransomware drop

Which type of threat actor is most likely to use default credentials and open ports?

• Nation-state actor

• Unintentional insider

• Script kiddie

• Organized crime group

SMiShing is a form of:

• Vishing via phone calls

• Messaging-based phishing via SMS

• DNS redirection

• Email spoofing

Which of the following is an example of a message-based attack vector?

• USB malware

• Drop attack

• Instant Messaging (IM)

• Trojan Horse

Define attack surface and provide one example.

Explain the difference between phishing and spear phishing.

Describe how a shadow IT situation might create an unintentional insider threat.

What is the purpose of pretexting in social engineering?

List two characteristics that distinguish a high-capability threat actor from a low-capability one.