A security analyst is reviewing a report of a successful phishing campaign. The report states that the attacker sent emails with a malicious attachment that, when opened, installed a keylogger on the victims' workstations. The keylogger then recorded keystrokes and sent them to an external server. Which two techniques are combined in this attack?

Privilege escalation via kernel exploit and lateral movement via pivoting

Password cracking via brute force and data exfiltration via steganography

Malware infection via email attachment and credential harvesting via keylogging

Command and control via DNS tunneling and data exfiltration via covert channels

CertNexusCyberSec First Responder (CFR)

Domain 1Objective 3

Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 2)

Part of the 1.0 Attack Computing Environments to Test Cybersecurity domain, which accounts for 52% of the CYBERSEC-FIRST-RESPONDER exam.

39questions here

8free pages

12concepts

52%of the exam

12 Concepts in This Objective

Credential Harvesting Techniques
Password Cracking Methods
Code Execution and Injection Attacks
Data Exfiltration Methods
Malware Infection Vectors
Command and Control (C&C) Mechanisms
Advanced Persistent Threats (APTs)
Privilege Escalation Techniques
Lateral Movement and Pivoting
Exploit Selection Based on Active Reconnaissance
Exploit Selection Based on General Research
Vulnerabilities in Unpatched or Outdated Software

Questions 6–10

6foundation · easy
Which data exfiltration technique hides sensitive data within an innocuous-looking file, such as an image or audio file, to avoid detection?
Select an answer first
7foundation · easy
Which resource is commonly used to research known vulnerabilities and their corresponding CVE identifiers?
Select an answer first
8foundation · easy
An attacker is researching a known vulnerability in a specific software version. Which resource would provide exploit code or proof-of-concept for that vulnerability?
Select an answer first
9application · medium
A security analyst is reviewing a report of a successful phishing campaign. The report states that the attacker sent emails with a malicious attachment that, when opened, installed a keylogger on the victims' workstations. The keylogger then recorded keystrokes and sent them to an external server. Which two techniques are combined in this attack?
Select an answer first
10foundation · easy
A user plugs a USB drive found in the parking lot into their workstation, and malware is installed. Which malware infection vector is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.

Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 2)

Questions 6–10

Which data exfiltration technique hides sensitive data within an innocuous-looking file, such as an image or audio file, to avoid detection?

Which resource is commonly used to research known vulnerabilities and their corresponding CVE identifiers?

An attacker is researching a known vulnerability in a specific software version. Which resource would provide exploit code or proof-of-concept for that vulnerability?

A user plugs a USB drive found in the parking lot into their workstation, and malware is installed. Which malware infection vector is this?

Keep studying — 1.0 Attack Computing Environments to Test Cybersecurity