Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
EC-Council logo

EC-CouncilCertified SOC Analyst

Domain 2Objective 1

Understanding Cyber Threats and Attacks CSA Practice Questions (Page 4)

Part of the Cyber Threats and Attack Methodology domain, which makes up ~21% of our current practice bank.

54questions here
11free pages
10concepts

Questions 16–20

  1. 16application · medium

    A SOC analyst is monitoring network traffic and notices that a single external IP is sending a high volume of SYN packets to a public-facing web server, but the server is not responding with SYN-ACK packets. The analyst also sees that the source IP is spoofed. Which type of network attack is most likely occurring?

    Select an answer first
  2. 17application · medium

    A SOC analyst is reviewing threat intelligence and sees that a hacktivist group has announced a campaign targeting organizations that do business with a certain government. The group's past attacks have included website defacement and DDoS attacks. Which threat actor motivation is most likely driving this campaign?

    Select an answer first
  3. 18foundation · easy

    Which type of malware is characterized by self-replication and spreading to other systems without user interaction?

    Select an answer first
  4. 19foundation · easy

    Which web application attack involves injecting malicious SQL code into a query to manipulate a database?

    Select an answer first
  5. 20foundation · easy

    Which characteristic is most indicative of an Advanced Persistent Threat (APT)?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSA” is a trademark of its owner, used for identification only.