Threat Vectors and Attack Surfaces SY0-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   An attacker exploits a known vulnerability in an outdated web server to gain unauthorized access. Which type of threat vector is this?

   • AFile-based vector
   • BVulnerable software vector
   • CSupply chain vector
   • DMessage-based vector
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which social engineering technique involves an attacker pretending to be a trusted authority figure to trick a victim into revealing sensitive information?

   • ATailgating
   • BPretexting
   • CBaiting
   • DPhishing
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An attacker sends a text message to a victim claiming they have won a prize and asks the victim to click a link to claim it. Which type of threat vector is this?

   • AMessage-based threat vector
   • BSupply chain threat vector
   • CFile-based threat vector
   • DVoice call threat vector
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A company discovers that a hardware component it purchased from a supplier contains a backdoor that allows remote access. Which type of threat vector is this?

   • AMessage-based threat vector
   • BVoice call threat vector
   • CSupply chain threat vector
   • DFile-based threat vector
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following best describes a common message-based threat vector used by attackers?

   • AUsing a brute-force attack to guess a user's password
   • BExploiting a vulnerability in a web server to gain unauthorized access
   • CIntercepting network traffic on a public Wi-Fi hotspot
   • DSending a phishing email with a malicious link to trick the recipient into entering credentials
   Reveal Solution Discussion Select an answer first