Which malware technique allows malicious code to remain dormant until a specific condition is met?

Emotet is best classified as which type of malware?

Fileless malware commonly abuses which Windows feature?

Which malware persistence mechanism modifies the Master Boot Record?

The primary purpose of the NotPetya attack was:

Which malware technique encrypts its payload differently each time?

A trojan disguised as a software update installing a RAT is an example of:

Which ransomware strain is known for double extortion?

Malware that spreads without user interaction is known as:

A targeted phishing email pretending to be from a company's CEO requesting an urgent wire transfer is known as:

An attacker calls an employee pretending to be IT support to reset their MFA token. This is an example of:

Which social engineering attack relies on curiosity, such as leaving infected USB drives in a car park?

In the 2020 Twitter breach, attackers primarily used:

Creating a fake scenario to manipulate a victim into disclosing information is known as:

A QR code on a restaurant table leading to a fake payment website is an example of:

Which psychological principle is most often exploited in “urgent action required” phishing emails?

A fake LinkedIn recruiter sending a malicious document to a developer is commonly associated with:

An attacker following an employee through a secure door without authentication is known as:

MFA fatigue attacks attempt to:

ARP spoofing allows an attacker to:

Which attack was used in the Mirai botnet to compromise IoT devices?

DNS amplification attacks exploit:

A rogue Wi-Fi access point mimicking a legitimate network is known as:

Which tool is commonly used for password spraying in enterprise environments?

What is the primary goal of a man-in-the-middle attack?

Which network attack exploits improperly segmented VLANs?

SQL injection exploits which application weakness?

Cross-Site Scripting (XSS) primarily targets:

A web attack that forces a logged-in user to perform unwanted actions is:

Which attack allows access to internal cloud metadata services such as AWS IAM credentials?

Insecure Direct Object Reference (IDOR) vulnerabilities often lead to:

Stuxnet specifically targeted which type of system?

Which IoT weakness is most commonly exploited in smart home devices?

An attack that sends malformed Modbus packets to disrupt industrial processes is an example of:

Misconfigured S3 buckets primarily lead to:

Which cloud attack involves abusing excessive permissions assigned to service accounts?

Cryptojacking in cloud environments often results in:

A Kubernetes pod escaping its container is an example of:

Which attack exploits insecure CI/CD pipelines?

Exposed cloud API keys in GitHub repositories often lead to:

Which web attack reads server-side files such as '/etc/passwd'?

OT environments are particularly vulnerable because they often:

A watering hole attack targets:

Which attack abuses OAuth misconfiguration to access user data?

What is the primary risk of exposed Docker APIs?

Cloud "shadow IT" primarily increases the risk of:

Multiple servers are encrypted rapidly using SMB exploits on unpatched systems.

A fake supplier email requests updated bank details.

PowerShell commands run without files being written to disk.

AWS keys leaked to GitHub result in unexpected EC2 usage.

Multiple MFA prompts overwhelm a user.

URL parameter manipulation reveals other users' data.

Malware targets Siemens PLCs via USB drives.

A rogue Wi-Fi access point mimics the corporate network.

Internal services accessed via web server requests.

One password attempt across many accounts.

Malformed Modbus packets disrupt industrial devices.

PHP shell uploaded via image upload form.

Helpdesk reset via fake new starter call.

Legitimate software update installs a backdoor.

Small DNS request causes large response flood.

Attacker escapes a Docker container.

Session cookies stolen via injected JavaScript.

CCTV cameras form a botnet.

Cloud role has excessive permissions.

Staff infected after visiting a trusted forum.