Information Security Attacks CCT Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   After successfully exploiting a vulnerability and gaining access to a system, an attacker establishes a persistent backdoor and moves laterally to other systems. Which stage of the attack lifecycle does this represent?

   • APost-exploitation
   • BDelivery
   • CWeaponization
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which type of threat actor is typically motivated by ideological beliefs and uses attacks to promote a political or social agenda?

   • AState-sponsored actor
   • BHacktivist
   • CInsider
   • DCybercriminal
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   During an incident response, an analyst finds that the attacker used a phishing email to deliver malware, which then established a command-and-control channel. The attacker then used the compromised machine to pivot to other systems. Which stage of the attack lifecycle is the command-and-control channel?

   • AExploitation
   • BActions on objectives
   • CDelivery
   • DCommand and control
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   During an incident investigation, an analyst finds that the attacker first scanned the network for open ports, then exploited a vulnerable service, and finally installed a backdoor for persistent access. Which sequence of attack lifecycle stages does this represent?

   • AReconnaissance, exploitation, installation
   • BWeaponization, delivery, exploitation
   • CDelivery, weaponization, command and control
   • DExploitation, installation, actions on objectives
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company's website becomes unresponsive. The network team finds that the server is overwhelmed by a flood of UDP packets from many different IP addresses. Which type of attack is this?

   • AMan-in-the-middle attack
   • BDistributed denial-of-service (DDoS) attack
   • CSQL injection attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first