Network Attacks and Defense Strategies CND Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A company's e-commerce site is experiencing intermittent outages. The network defender notices that the outages correlate with a high volume of HTTP GET requests for a specific product page, all from a small set of IP addresses. The requests are legitimate-looking but are sent at a rate that exceeds normal human behavior. Which type of attack is most likely?

   • ACross-site scripting (XSS) attack
   • BApplication-layer DDoS attack
   • CSQL injection attack
   • DNetwork-layer DDoS attack
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of ransomware?

   • ATo replicate itself across the network
   • BTo hide its presence on a system
   • CTo encrypt a victim's data and demand payment for decryption
   • DTo steal credentials and send them to a remote server
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A network defender is configuring an IDS/IPS to protect a web server. The defender wants to detect SQL injection attempts but also wants to avoid blocking legitimate traffic that contains the word 'select' in a query string. Which configuration approach would best balance detection and false positives?

   • AEnable anomaly-based detection and block any traffic that deviates from normal behavior
   • BEnable signature-based detection for known SQL injection patterns and tune the signatures to reduce false positives
   • CUse only a firewall to filter traffic
   • DDisable the IDS/IPS to avoid any false positives
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has suffered a ransomware attack. The incident response team has contained the spread by isolating infected systems. The company has backups, but the last backup was taken 24 hours before the attack. The management wants to restore operations as quickly as possible. What is the most important consideration before restoring from backup?

   • ARestore all systems simultaneously to minimize downtime.
   • BEnsure that the backup is free of malware and that the vulnerability used in the attack is patched.
   • CNotify law enforcement before restoring any systems.
   • DChange all passwords and credentials before restoring the backup.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which wireless attack involves an attacker setting up a fake access point that mimics a legitimate one to intercept user traffic?

   • ABluesnarfing
   • BEvil twin
   • CDeauthentication attack
   • DWEP cracking
   Reveal Solution Discussion Select an answer first