A group of activists defaces a government website and replaces the homepage with a political message. They do not steal data or demand money. Which threat actor type and motivation best describe this attack?

State-sponsored actor motivated by espionage

Cybercriminal motivated by financial gain

Hacktivist motivated by political or social causes

A security analyst is investigating a breach where an attacker used a zero-day exploit to gain access, then moved laterally and exfiltrated data over several months. The attacker's tools and techniques are highly sophisticated and appear to be funded by a nation-state. The analyst must determine the most likely threat actor type and motivation to prioritize response. Which combination is most accurate?

Hacktivist with ideological motivation

Insider with financial gain motivation

State-sponsored group with espionage motivation

Script kiddie with notoriety motivation

A company is deciding where to invest in security controls. They have limited budget and need to address the most likely attack vectors. They have seen an increase in phishing emails and unpatched software vulnerabilities. Which combination of controls would best address both vectors?

Implement multi-factor authentication (MFA) and encryption.

Deploy a network firewall and an intrusion prevention system (IPS).

Deploy a spam filter and implement a patch management process.

Conduct security awareness training and deploy a web application firewall (WAF).

EC-CouncilCertified Cybersecurity Technician

Domain 1Objective 2

Information Security Attacks CCT Practice Questions (Page 7)

Part of the Information Security Threats and Attacks domain, which makes up ~12% of our current practice bank.

41questions here

9free pages

6concepts

Questions 31–35

31application · medium
A group of activists defaces a government website and replaces the homepage with a political message. They do not steal data or demand money. Which threat actor type and motivation best describe this attack?
Select an answer first
32expert · hard
A security analyst is investigating a breach where an attacker used a zero-day exploit to gain access, then moved laterally and exfiltrated data over several months. The attacker's tools and techniques are highly sophisticated and appear to be funded by a nation-state. The analyst must determine the most likely threat actor type and motivation to prioritize response. Which combination is most accurate?
Select an answer first
33expert · hard
A company is deciding where to invest in security controls. They have limited budget and need to address the most likely attack vectors. They have seen an increase in phishing emails and unpatched software vulnerabilities. Which combination of controls would best address both vectors?
Select an answer first
34application · medium
A company experiences a data breach where customer credit card numbers are stolen. The company is required to notify affected customers and may face fines. Which impact of the attack is most directly demonstrated?
Select an answer first
35foundation · easy
A disgruntled employee with legitimate access to the corporate network intentionally deletes critical files and exfiltrates sensitive customer data. Which threat actor category best describes this individual?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Information Security Attacks CCT Practice Questions (Page 7)

Questions 31–35

A group of activists defaces a government website and replaces the homepage with a political message. They do not steal data or demand money. Which threat actor type and motivation best describe this attack?

A company is deciding where to invest in security controls. They have limited budget and need to address the most likely attack vectors. They have seen an increase in phishing emails and unpatched software vulnerabilities. Which combination of controls would best address both vectors?

A company experiences a data breach where customer credit card numbers are stolen. The company is required to notify affected customers and may face fines. Which impact of the attack is most directly demonstrated?

A disgruntled employee with legitimate access to the corporate network intentionally deletes critical files and exfiltrates sensitive customer data. Which threat actor category best describes this individual?

Keep studying — Information Security Threats and Attacks