Objective 1.3 Exploit Vulnerabilities in Software. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 8)

Questions 36–39

1. 36foundation · easy

   An attacker attempts to crack a password by trying every possible combination of characters until the correct one is found. Which password cracking method is being used?

   • ABrute force attack
   • BDictionary attack
   • CRainbow table attack
   • DPhishing
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which characteristic is a defining feature of an Advanced Persistent Threat (APT)?

   • AUse of only commodity malware
   • BLong-term persistence and stealth
   • CQuick, opportunistic attacks
   • DLack of resources
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary purpose of a command and control (C&C) channel in a malware attack?

   • ATo encrypt data on the compromised system
   • BTo spread malware to other systems
   • CTo allow the attacker to remotely manage compromised systems
   • DTo harvest credentials from the compromised system
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   An attacker uses an unused portion of a network protocol to send stolen data out of the network without being detected by normal traffic monitoring. Which data exfiltration technique is this?

   • ACovert channel
   • BSteganography
   • CKeylogging
   • DEncryption
   Reveal Solution Discussion Select an answer first