Types of Attacks N10-009 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of DNS poisoning?

   • ATo redirect users from legitimate websites to attacker-controlled destinations
   • BTo encrypt DNS queries to protect user privacy
   • CTo intercept and modify email messages in transit
   • DTo exhaust the CPU resources of a DNS server
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A software vendor releases a security patch for a critical vulnerability in its web server software. Before most organizations can apply the patch, attackers begin exploiting the vulnerability to gain unauthorized access to unpatched servers. The vulnerability was not publicly known before the patch was released. Which type of attack is this?

   • ADNS poisoning
   • BZero-day attack
   • CBrute force attack
   • DReplay attack
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which password attack technique uses precomputed tables of password hashes to quickly reverse a captured hash into its plaintext value?

   • ABrute-force attack
   • BSpraying attack
   • CRainbow table attack
   • DDictionary attack
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which characteristic best describes a session hijacking attack?

   • AAn attacker inserts malicious SQL statements into a database query to extract data.
   • BAn attacker intercepts and takes over an authenticated session between a client and a server.
   • CAn attacker tricks a user into revealing their password through a fraudulent website.
   • DAn attacker floods a server with requests to prevent legitimate users from accessing a service.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which scenario is an example of impersonation?

   • AAn attacker calls an employee pretending to be from the IT help desk and asks for their password
   • BAn attacker sends an email with a malicious attachment to a list of employees
   • CAn attacker uses a vulnerability in a web server to gain access
   • DAn attacker floods a network with traffic to cause a denial of service
   Reveal Solution Discussion Select an answer first