Information Security Attacks CCT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is an example of a human-based attack vector?

   • AAn attacker posing as IT support to trick an employee into revealing their password
   • BA malicious email attachment that installs ransomware when opened
   • CAn unpatched web server vulnerability exploited via a crafted HTTP request
   • DA brute-force attack against an SSH service using a password dictionary
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security analyst notices that an attacker has been probing the company's web server for vulnerabilities. The attacker then exploits a SQL injection flaw to extract customer data. Which stage of the attack lifecycle does the SQL injection exploitation represent?

   • APost-exploitation
   • BExploitation
   • CWeaponization
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In the cyber kill chain, which stage involves the attacker gathering information about the target, such as open ports, software versions, and employee names?

   • AExploitation
   • BWeaponization
   • CDelivery
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A disgruntled employee, before leaving the company, deletes critical project files and modifies several financial records. The company later discovers the changes and is able to restore the files from backups, but the financial records were altered. Which impact does this attack have on the CIA triad?

   • ALoss of integrity
   • BLoss of confidentiality
   • CLoss of non-repudiation
   • DLoss of availability
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A disgruntled employee deliberately deletes critical files from the company's file server before leaving the company. Which threat actor type and motivation best describe this action?

   • AState-sponsored actor motivated by espionage
   • BCybercriminal motivated by financial gain
   • CHacktivist motivated by political cause
   • DInsider motivated by revenge
   Reveal Solution Discussion Select an answer first