Types of Attacks N10-009 Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is the primary goal of a phishing attack?

   • ATo trick the victim into providing confidential information or performing an action
   • BTo overwhelm a server with traffic to make it unavailable
   • CTo gain unauthorized access to a system by exploiting a software vulnerability
   • DTo encrypt the victim's files and demand a ransom
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A user reports receiving an email that appears to be from the company's IT help desk, asking them to verify their password by clicking a link. The email addresses the user by their full name and includes their employee ID. The link points to a domain that closely resembles the company's official portal but is misspelled. Which type of attack best describes this scenario?

   • ASmishing
   • BWhaling
   • CSpear phishing
   • DVishing
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   An attacker calls a company's finance department, claiming to be an external auditor who needs a list of all employee names and email addresses to 'complete a mandatory compliance review.' The attacker provides a fake audit ID and speaks with authority. The employee provides the data. Which social engineering technique is this?

   • ASmishing
   • BWhaling
   • CPhishing
   • DPretexting
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Which of the following is a common delivery method for ransomware?

   • AARP poisoning to redirect traffic
   • BDNS poisoning to redirect to malicious sites
   • CPhishing emails with malicious attachments or links
   • DPhysical tailgating into a secure facility
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   What is a zero-day attack?

   • AAn attack that targets systems that have been offline for a day
   • BAn attack that uses a known vulnerability that has been patched
   • CAn attack that exploits a previously unknown vulnerability before a patch is available
   • DAn attack that occurs at midnight on the first day of the month
   Reveal Solution Discussion Select an answer first