A security analyst is reviewing a web application that allows users to post comments. The application does not sanitize user input before displaying it to other users. An attacker submits a comment containing a malicious script that executes in the browsers of other users when they view the comment. Which type of attack is this?

Cross-Site Request Forgery (CSRF)

What is the primary characteristic of adware?

It encrypts files and demands a ransom

It records keystrokes to steal passwords

It displays unwanted advertisements on the user's device

It hides malicious processes from the operating system

Which of the following is a common method used to perform session hijacking?

Exploiting a buffer overflow in a web server to execute arbitrary code.

Sending a large number of ICMP echo requests to a host.

Predicting or stealing a session token.

Using a rogue DHCP server to assign incorrect IP configurations.

How does spear phishing differ from general phishing?

Spear phishing uses voice calls instead of email

Spear phishing uses SMS messages instead of email

Spear phishing only targets high-level executives

Spear phishing targets specific individuals or organizations with personalized content

Which of the following is an example of a vishing attack?

An email that appears to be from a bank asking for account verification

A pop-up advertisement on a website that prompts the user to download software

A text message claiming the recipient won a gift card and asking for personal details

A phone call from someone posing as tech support asking for remote access to the victim's computer

CompTIANetwork+

Domain 4Objective 7

Types of Attacks N10-009 Practice Questions (Page 8)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 83 practice questions to prepare you well beyond it. (estimate)

83questions here

17free pages

30concepts

Questions 36–40

36foundation · easy
A security analyst is reviewing a web application that allows users to post comments. The application does not sanitize user input before displaying it to other users. An attacker submits a comment containing a malicious script that executes in the browsers of other users when they view the comment. Which type of attack is this?
Select an answer first
37foundation · easy
What is the primary characteristic of adware?
Select an answer first
38foundation · easy
Which of the following is a common method used to perform session hijacking?
Select an answer first
39foundation · easy
How does spear phishing differ from general phishing?
Select an answer first
40foundation · easy
Which of the following is an example of a vishing attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.