Information Security Threats and Vulnerabilities CCT Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company has experienced a ransomware attack that encrypted critical files. The company has backups, but the backups are also encrypted because they were stored on the same network. The security team must implement a mitigation strategy to prevent this from happening again. Which strategy is most effective?

   • ADeploy endpoint detection and response (EDR) on all workstations
   • BIncrease the frequency of backups
   • CImplement strict access controls on the backup server
   • DStore backups offline or in an isolated network segment
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company's website was defaced with a political message, and the attacker claimed responsibility on social media. The attack did not cause significant financial damage, but it generated media attention. Which threat actor type is most likely responsible?

   • AA cybercriminal seeking financial gain through ransomware
   • BA nation-state actor conducting espionage
   • CA hacktivist promoting a political or social cause
   • DAn insider threat employee with a grudge against the company
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A security analyst is investigating a series of phishing emails that appear to come from the company's CEO. The emails ask employees to purchase gift cards and send the codes. The emails are well-crafted and use the CEO's actual email signature. Which type of social engineering attack is this?

   • ASpear phishing, because the emails are targeted at specific employees using the CEO's identity
   • BPharming, because the attack redirects users to a fake website
   • CVishing, because the attack uses voice communication
   • DWhaling, because the attack targets the CEO themselves
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which of the following best describes the impact of a data breach on an organization?

   • AOnly a temporary slowdown in network performance
   • BFinancial loss, reputational damage, and potential legal consequences
   • CImmediate deletion of all backup data
   • DNo impact if the data is not sensitive
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary motivation of a hacktivist?

   • AFinancial profit
   • BIntellectual challenge
   • CPolitical or social change
   • DPersonal revenge against an employer
   Reveal Solution Discussion Select an answer first