Define Essential Security Principles 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a social engineering attack vector?

   • AA denial-of-service attack
   • BA brute-force password attack
   • CA firewall misconfiguration
   • DA phone call impersonating IT support to obtain a password
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a risk assessment, which item would be classified as a threat?

   • AAn unpatched web server
   • BA SQL injection tool
   • CA hacker with the intent to steal customer data
   • DThe potential loss of reputation from a breach
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a common attack vector?

   • APatch management
   • BEncryption
   • CFirewall
   • DPhishing
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An employee plugs a USB drive found in the parking lot into their work computer. The USB drive contains malware that installs a keylogger. Which attack vector was used?

   • APhishing
   • BDenial of service
   • CSocial engineering
   • DMalware
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A cybersecurity analyst discovers a critical vulnerability in the company's customer portal. The analyst also finds that the vulnerability has already been exploited, and customer data may have been exposed. The analyst's manager asks the analyst to keep the incident quiet to avoid regulatory scrutiny. According to the cybersecurity code of ethics, what should the analyst do?

   • AReport the incident through the proper internal and regulatory channels
   • BIgnore the incident because it is not the analyst's responsibility
   • CDelete the logs to prevent evidence of the breach
   • DQuietly fix the vulnerability without reporting the breach
   Reveal Solution Discussion Select an answer first