Classification and Types of Attacks CEH Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security team is responding to a ransomware incident. The ransomware encrypted critical files and left a ransom note. The team also discovers that the ransomware used a previously unknown vulnerability to propagate across the network. Which of the following best describes the attack?

   • AZero-day exploit combined with ransomware
   • BAdvanced Persistent Threat (APT)
   • CInsider attack
   • DWorm attack
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which cryptographic attack involves trying every possible key until the correct one is found?

   • AMan-in-the-middle attack
   • BBrute force attack
   • CBirthday attack
   • DRainbow table attack
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is a zero-day exploit?

   • AAn exploit that only works on systems that have not been updated
   • BAn exploit that is released on the same day a vulnerability is discovered
   • CAn exploit that targets a vulnerability that has been known for years
   • DAn exploit that takes advantage of a vulnerability before the vendor releases a patch
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which type of malware is primarily used to secretly monitor a user's activities and collect sensitive information?

   • AWorm
   • BTrojan
   • CSpyware
   • DRansomware
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company allows employees to connect personal smartphones to the corporate Wi-Fi network. The network uses WPA2-PSK with a shared passphrase. Which of the following best describes how this practice expands the attack surface?

   • AIt introduces a wireless attack vector that could allow an attacker to capture the shared passphrase and decrypt traffic.
   • BIt introduces a web application attack vector because smartphones run web browsers.
   • CIt introduces a social engineering vector because employees might be tricked into installing malware.
   • DIt introduces a physical attack vector because smartphones can be physically stolen.
   Reveal Solution Discussion Select an answer first