Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which technique is commonly used to defend against man-in-the-middle attacks?

   • ASharing passwords via email
   • BDisabling all network firewalls
   • CUsing strong encryption and authentication (e.g., TLS)
   • DUsing plain HTTP for all communications
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a physical attack on a computer system?

   • AMan-in-the-middle attack
   • BPhishing email
   • CStealing a laptop containing unencrypted data
   • DSQL injection
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How are botnets typically created?

   • ABy purchasing cloud servers and configuring them to work together
   • BBy infecting many devices with malware that allows remote control
   • CBy physically connecting computers with Ethernet cables
   • DBy using social engineering to trick users into joining a network
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does a Distributed Denial of Service (DDoS) attack differ from a traditional DoS attack?

   • AA DDoS attack does not require any malicious software
   • BA DDoS attack is always more severe than a DoS attack
   • CA DDoS attack uses multiple compromised systems to generate traffic
   • DA DDoS attack only targets network infrastructure
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An employee receives a phone call from someone claiming to be from the IT help desk, asking for the employee's password to 'verify their account.' The employee has not submitted a support ticket. Which type of social engineering attack is this, and what is the best response?

   • APhishing; provide the password to avoid account lockout
   • BVishing; hang up and call the IT help desk using a verified number
   • CSmishing; reply with the password via text message
   • DTailgating; ask for the caller's employee ID
   Reveal Solution Discussion Select an answer first