Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An employee with access to sensitive customer data is observed emailing large amounts of data to a personal account. The employee claims it is for a side project. Which type of insider threat does this represent?

   • ANegligent insider
   • BCompromised insider
   • CAccidental insider
   • DMalicious insider
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A small business has several IP cameras and a network-attached storage (NAS) device. One morning, the cameras are unresponsive, and the NAS shows a message demanding payment in cryptocurrency to unlock files. The cameras' firmware was never updated, and the NAS was exposed to the internet. Which combination of attack types best describes what happened?

   • ARansomware and a worm
   • BTrojan and spyware
   • CVirus and a logic bomb
   • DDDoS and a botnet
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security analyst notices that a small number of carefully crafted phishing emails have been sent to executives, and the payload is a remote access Trojan (RAT) that communicates with a command-and-control server using encrypted traffic. The RAT has been dormant for weeks, and the analyst suspects the attackers are gathering intelligence. Which threat actor profile best matches this behavior?

   • AScript kiddie
   • BInsider threat
   • CAdvanced Persistent Threat (APT)
   • DHacktivist
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A hospital's imaging systems are infected with ransomware, and the attackers demand payment in Bitcoin to decrypt patient files. The hospital has backups, but they are stored on the same network and were also encrypted. Which of the following is the most effective preventive measure to avoid this situation in the future?

   • APay the ransom to recover data quickly
   • BInstall antivirus on all systems
   • CDisconnect the imaging systems from the network
   • DKeep backups offline and test restoration regularly
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's website becomes unresponsive during a product launch. Network logs show a massive influx of traffic from thousands of different IP addresses, all sending requests to the same URL. Which type of attack is this, and what is the primary goal?

   • ADDoS attack, to overwhelm the server and make the service unavailable
   • BBotnet attack, to install malware on the website's visitors
   • CPhishing attack, to trick users into revealing credentials
   • DDoS attack, to steal sensitive data from the server
   Reveal Solution Discussion Select an answer first