Information Security Attacks CCT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team discovers that a competitor has been stealing trade secrets through a series of targeted spear-phishing emails sent to engineers. The emails contained malware that exfiltrated design documents. Which threat actor type is most likely responsible?

   • AState-sponsored actor
   • BScript kiddie
   • CHacktivist
   • DCybercriminal
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company's database is compromised. The attacker modified customer records, changing addresses and phone numbers. The company only discovers the issue when customers complain about not receiving bills. Which impact of the attack is most significant in this scenario?

   • ALoss of integrity, because the data was modified without authorization.
   • BLoss of non-repudiation, because the attacker denied the action.
   • CLoss of availability, because the database was unavailable.
   • DLoss of confidentiality, because the attacker accessed the database.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An attacker gains access to a company's network by plugging a rogue device into an unsecured network port in a conference room. The device then scans the network for other devices. Which attack vector is being used?

   • APhysical vector
   • BApplication vector
   • CHuman vector
   • DNetwork vector
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network administrator discovers that an employee's account was used to access sensitive files at odd hours. The employee claims they were not at work and their password was not shared. Further investigation reveals that the employee's workstation was infected with a keylogger. Which threat actor type is most likely behind this incident?

   • AHacktivist
   • BInsider
   • CState-sponsored group
   • DExternal attacker using stolen credentials
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company experiences a data breach where customer credit card numbers are stolen. The company's primary concern is the legal and regulatory consequences, as well as the loss of customer trust. Which impact of the attack is most significant from a business perspective?

   • ALoss of availability
   • BLoss of integrity
   • CFinancial and reputational damage
   • DLoss of confidentiality
   Reveal Solution Discussion Select an answer first