Information Security Attacks CCT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital's patient portal is hit by a ransomware attack. The attackers encrypt the database and demand payment. The IT team restores from backups, but during the outage, doctors could not access patient records for 6 hours. Which aspect of the CIA triad was most directly impacted?

   • AConfidentiality, because the attackers accessed the encrypted data.
   • BAvailability, because the data was inaccessible for 6 hours.
   • CNon-repudiation, because the attackers denied their actions.
   • DIntegrity, because the data was modified by the encryption process.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's website becomes slow and unresponsive after a flood of traffic from many compromised devices. The traffic appears to be legitimate HTTP requests, but the volume is overwhelming the server. Which attack type is this?

   • ASocial engineering
   • BDDoS
   • CPhishing
   • DMalware
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A distributed denial-of-service (DDoS) attack floods a company's web server with traffic, making the website unavailable to legitimate users. Which security objective is primarily affected?

   • AConfidentiality
   • BIntegrity
   • CAuthenticity
   • DAvailability
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team is analyzing a series of attacks. One attack involved a malicious email attachment, another used a vulnerability in a web browser, and a third involved a USB drive left in the parking lot. The team must categorize these attacks by vector to develop a comprehensive defense strategy. Which classification is correct?

   • AHuman, application, and physical vectors
   • BPhysical, network, and application vectors
   • CNetwork, application, and human vectors
   • DEmail, network, and physical vectors
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A security analyst is reviewing attack pathways and identifies that a threat actor exploited a vulnerability in a custom web application to gain unauthorized access. Which attack vector category does this represent?

   • AApplication vector
   • BNetwork vector
   • CPhysical vector
   • DHuman vector
   Reveal Solution Discussion Select an answer first