A company discovers that a former employee, who was terminated two weeks ago, used their old credentials to log into the VPN and copy sensitive customer data. The employee had been disgruntled about the termination. Which threat actor type and motivation best describe this incident?

Insider with financial gain motivation

State-sponsored actor with espionage motivation

Hacktivist with ideological motivation

Insider with revenge motivation

A company discovers that a sophisticated attack has been stealing intellectual property for months. The attack used custom malware and targeted specific individuals. The company suspects a nation-state actor. Which combination of indicators would most strongly support this attribution?

The attack was carried out by a single individual using basic tools.

The attack used zero-day exploits, custom tools, and targeted specific high-value individuals.

The attack was financially motivated and demanded a ransom.

The malware was publicly available and the attack used common phishing techniques.

A small business receives an email that appears to be from its bank, warning of a suspicious login and urging the recipient to click a link to verify account activity. The link leads to a fake login page that captures credentials. Which attack type and vector combination best describes this incident?

Spear phishing via the physical vector

Malware via the application vector

EC-CouncilCertified Cybersecurity Technician

Domain 1Objective 2

Information Security Attacks CCT Practice Questions (Page 3)

Part of the Information Security Threats and Attacks domain, which makes up ~12% of our current practice bank.

41questions here

9free pages

6concepts

Questions 11–15

11application · medium
A company discovers that a former employee, who was terminated two weeks ago, used their old credentials to log into the VPN and copy sensitive customer data. The employee had been disgruntled about the termination. Which threat actor type and motivation best describe this incident?
Select an answer first
12expert · hard
A company discovers that a sophisticated attack has been stealing intellectual property for months. The attack used custom malware and targeted specific individuals. The company suspects a nation-state actor. Which combination of indicators would most strongly support this attribution?
Select an answer first
13application · medium
A small business receives an email that appears to be from its bank, warning of a suspicious login and urging the recipient to click a link to verify account activity. The link leads to a fake login page that captures credentials. Which attack type and vector combination best describes this incident?
Select an answer first
14application · medium
A user receives a pop-up message claiming their computer is infected and to call a toll-free number for support. The caller asks for remote access to the computer. Which type of social engineering attack is this?
Select an answer first
15foundation · easy
A foreign government-sponsored group infiltrates a defense contractor's network to steal classified military technology. Which motivation best describes this attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Information Security Attacks CCT Practice Questions (Page 3)

Questions 11–15

A company discovers that a former employee, who was terminated two weeks ago, used their old credentials to log into the VPN and copy sensitive customer data. The employee had been disgruntled about the termination. Which threat actor type and motivation best describe this incident?

A company discovers that a sophisticated attack has been stealing intellectual property for months. The attack used custom malware and targeted specific individuals. The company suspects a nation-state actor. Which combination of indicators would most strongly support this attribution?

A user receives a pop-up message claiming their computer is infected and to call a toll-free number for support. The caller asks for remote access to the computer. Which type of social engineering attack is this?

A foreign government-sponsored group infiltrates a defense contractor's network to steal classified military technology. Which motivation best describes this attack?

Keep studying — Information Security Threats and Attacks