Define Essential Security Principles 100-160 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security team is analyzing a series of attacks. The first attack used a well-known exploit tool to deface a website with a political message. The second attack used a sophisticated, custom-built rootkit to steal intellectual property from a defense contractor. The third attack involved a disgruntled employee who leaked sensitive data to the press. Which set of attacker types best matches these attacks?

   • ACybercriminal, insider threat, nation-state actor
   • BHacktivist, nation-state actor, insider threat
   • CNation-state actor, hacktivist, script kiddie
   • DScript kiddie, cybercriminal, hacktivist
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A small business runs a public-facing web server that is patched monthly. A security consultant identifies that the server runs an outdated version of a content management system with a known remote code execution vulnerability. The consultant notes that the vulnerability has been exploited in the wild, but the server is not currently compromised. Which statement best describes the current risk to the business?

   • AThe risk is high because a threat exists that could exploit the vulnerability, and the potential impact is severe.
   • BThe risk is low because the vulnerability has not yet been exploited on this specific server.
   • CThe risk is zero because the server is patched monthly, which eliminates all known vulnerabilities.
   • DThe risk is equal to the likelihood of the threat, regardless of the vulnerability's impact.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A penetration tester is assessing a web application. The tester uses a tool that sends specially crafted SQL queries to the application's login form, causing it to return data from the database that should not be accessible. Which term best describes the tool's action?

   • AExploit
   • BVulnerability
   • CThreat
   • DRisk
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company's firewall logs show repeated attempts to connect to an internal server on a port that is not open. The attempts are coming from multiple external IP addresses and appear automated. Which term best describes these connection attempts?

   • AThreat
   • BVulnerability
   • CRisk
   • DExploit
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A hospital's electronic health record system was hit by ransomware. The attackers encrypted the patient records and demanded payment. The hospital restored the data from backups, but the restoration process took several hours, during which clinicians could not access patient information. Which two components of the CIA triad were most directly affected?

   • AConfidentiality and integrity
   • BIntegrity and availability
   • CIntegrity and confidentiality
   • DConfidentiality and availability
   Reveal Solution Discussion Select an answer first