Threat Vectors and Attack Surfaces SY0-701 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   An employee downloads a cracked software installer from an untrusted website, and the installer contains malware. What type of threat vector is this?

   • AFile-based threat vector
   • BSupply chain threat vector
   • CVoice call threat vector
   • DMessage-based threat vector
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An attacker leaves a USB drive in a parking lot labeled 'Confidential' to entice an employee to plug it into their computer. Which social engineering technique is this?

   • APhishing
   • BQuid pro quo
   • CBaiting
   • DPretexting
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary risk of connecting to an unsecured public Wi-Fi network without using a VPN?

   • AThe device's IP address will be permanently changed
   • BThe network will slow down due to high usage
   • CAttackers on the same network can intercept and read unencrypted traffic
   • DThe device will automatically download malware from the network
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An attacker sets up a rogue access point with a name similar to a legitimate business's Wi-Fi to trick users into connecting. What is this attack exploiting?

   • AThe trust users place in familiar network names
   • BA vulnerability in the user's operating system
   • CThe physical location of the business
   • DThe lack of encryption on the legitimate network
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a common file-based threat vector?

   • AA phishing email that asks for credentials
   • BA malicious macro embedded in a Word document
   • CA vishing call pretending to be tech support
   • DA rogue access point in a coffee shop
   Reveal Solution Discussion Select an answer first