1.1 Explain Attack Threats Against On-Premises, Hybrid, and Cloud Environments Such as Viruses, Trojans, DoS/DDoS, Phishing, Rootkits, Man-In-The Middle, Malware, Data Breaches, Insecure APIs, Compromised Credentials, PQC, and AI 350-701 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is a potential consequence of a data breach for an organization?

   • AReduced regulatory scrutiny
   • BIncreased customer loyalty
   • CFinancial loss and reputational damage
   • DImproved system performance
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company's cloud-hosted web application is under a DDoS attack. The attack is a mix of volumetric traffic and application-layer requests. The security team has implemented rate limiting and scaled the application, but the attack continues. Which additional mitigation should be considered?

   • ADeploy a web application firewall (WAF) with bot management
   • BIncrease the application's logging level
   • CMove the application to a different cloud region
   • DDisable the application's public endpoint
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company discovers that a disgruntled employee copied sensitive customer data to a USB drive before leaving the company. The employee had legitimate access to the data. Which type of data breach is this?

   • AInsider threat
   • BExternal attacker
   • CInsecure API
   • DMisconfigured storage
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An attacker obtains a list of usernames and passwords from a data breach on a public forum. The attacker then tries these credentials against the company's VPN and email systems. Several accounts are compromised. Which attack vector is being used?

   • ACredential stuffing
   • BBrute-force attack
   • CPhishing attack
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A user connects to a public Wi-Fi network at a coffee shop. An attacker on the same network intercepts the user's traffic and forwards it to the legitimate website, while also capturing the user's login credentials. Which attack is being performed?

   • ADenial-of-service (DoS) attack
   • BTrojan infection
   • CMan-in-the-middle (MITM) attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first