Threat Vectors and Attack Surfaces SY0-701 Practice Questions (Page 3)

Questions 11–14

1. 11foundation · easy

   What is the term for a social engineering attack conducted over the phone to trick victims into revealing sensitive information?

   • ASmishing
   • BPhishing
   • CVishing
   • DPretexting
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes a supply chain threat vector?

   • AAn attacker compromises a software vendor's update server to distribute malware to customers
   • BAn attacker sends a phishing email to an employee
   • CAn attacker uses a rogue access point to intercept traffic
   • DAn attacker exploits a vulnerability in a web application
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a common example of a vulnerable software vector?

   • AExploiting a buffer overflow in a network service
   • BUsing a rogue access point
   • CCalling a victim to extract information
   • DSending a phishing email
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company's HR department receives an email that appears to be from the CEO, urgently requesting the W-2 forms of all employees. The email includes a link to a SharePoint-like site that requires credentials. Which threat vector is being exploited, and what is the most effective control to mitigate this specific attack?

   • AFile-based vector; block executable attachments in the email gateway.
   • BMessage-based vector; implement a spam filter that quarantines emails with external links.
   • CVoice call vector; enable multi-factor authentication on the HR email system.
   • DMessage-based vector; provide security awareness training on phishing and social engineering.
   Reveal Solution Discussion Select an answer first