Cyberattack Methods 1

What is the main difference between an attack surface and an attack vector?

• Attack vector is hardware, attack surface is software

• Attack surface includes all potential entry points; vector is the specific method used

• Attack vector includes employees, attack surface includes only systems

• They are interchangeable terms

Which of the following best describes a passive attack?

• Modifying system configurations

• Encrypting files with ransomware

• Monitoring data traffic without altering it

• Deleting user data

Which cyberattack method exploits the psychological manipulation of users?

• Brute-force attack

• Zero-day exploit

• Social engineering

• Denial-of-service

What is an example of a common social engineering tactic?

• Port scanning

• Baiting

• Packet sniffing

• Firewall bypassing

What type of phishing targets high-level executives?

• Smishing

• Whaling

• Vishing

• Clone phishing

In a zero-trust model, what is assumed about internal users and systems?

• They are always trusted

• Only administrators are verified

• No one is trusted by default

• Internal systems are secure by default

What does a brute-force attack aim to do?

• Crack passwords by trying many combinations

• Infect systems with malware

• Intercept unencrypted emails

• Monitor employee communication

What makes a password weak?

• It is unique

• It includes a passphrase

• It is reused and short

• It includes symbols and numbers

Which is an example of an active attack?

• Reading unencrypted emails

• Installing ransomware

• Observing login attempts

• Watching network traffic

What is a zero-day vulnerability?

• An outdated antivirus signature

• A known vulnerability with a patch

• An unknown software flaw exploited before a patch exists

• A delay in system update