Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is Ettercap primarily used for?

   • APort scanning
   • BWeb application testing
   • COffline password cracking
   • DMan-in-the-middle attacks such as ARP poisoning
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   An organization's security team notices that thousands of IoT devices on the internet are sending coordinated HTTP requests to a single e-commerce website, causing it to crash. The devices were compromised by malware that allows remote control. Which term best describes this collection of compromised devices?

   • APharming
   • BBeacon
   • CBotnet
   • DBackdoor
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A security auditor finds that a file share containing HR records is accessible to all authenticated domain users. The share's NTFS permissions grant 'Modify' to the 'Domain Users' group. The auditor also discovers that the share is configured with 'Everyone: Full Control' at the share level. Which finding is the most critical vulnerability?

   • AThe lack of encryption on the file share
   • BThe share being accessible over the network
   • CExcessive share-level permissions combined with broad NTFS permissions
   • DThe use of NTFS permissions instead of share permissions
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Which of the following best describes a phishing attack?

   • AA technique that intercepts and modifies communications between two parties without their knowledge.
   • BA method of exploiting a software vulnerability to execute arbitrary code on a target system without user interaction.
   • CAn attack that overwhelms a system with traffic to make it unavailable to legitimate users.
   • DA social engineering technique that tricks users into revealing sensitive information or performing actions via deceptive electronic communications.
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   What is beaconing in the context of command-and-control (C&C) communication?

   • ASending a large volume of traffic to a target server
   • BEncrypting data on the infected host
   • CPeriodic communication from an infected host to a C&C server
   • DScanning network ports to find open services
   Reveal Solution Discussion Select an answer first