Network Attacks and Defense Strategies CND Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which type of malware is self-replicating and spreads across networks without requiring user interaction?

   • ATrojan
   • BVirus
   • CWorm
   • DRansomware
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which monitoring technique involves capturing and analyzing network packets to detect suspicious traffic?

   • ALog aggregation
   • BPacket capture and analysis
   • CVulnerability scanning
   • DPenetration testing
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the core principle of defense-in-depth?

   • ARelying on a single strong firewall to block all attacks
   • BUsing multiple layers of security controls so that if one fails, others still provide protection
   • CPlacing all security devices at the network perimeter
   • DUsing only encryption to protect data
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which attack category is characterized by an attacker attempting to make a network resource unavailable to legitimate users?

   • AReconnaissance
   • BDenial of service
   • CMalware-based attack
   • DAccess attack
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is reviewing logs from multiple sources and notices that a user account has been locked out several times in the past hour. The lockouts occur from different source IP addresses, and the account is a service account with high privileges. What should the analyst do first?

   • AReset the service account password and inform the application team.
   • BCorrelate the lockout events with other logs to determine if this is a brute-force attack.
   • CBlock the source IP addresses in the firewall.
   • DDisable the service account immediately to prevent further lockouts.
   Reveal Solution Discussion Select an answer first