
EC-CouncilCertified SOC Analyst
Domain 2Objective 1
Understanding Cyber Threats and Attacks CSA Practice Questions (Page 4)
Part of the Cyber Threats and Attack Methodology domain, which makes up ~21% of our current practice bank.
54questions here
11free pages
10concepts
Questions 16–20
- 16
A SOC analyst is monitoring network traffic and notices that a single external IP is sending a high volume of SYN packets to a public-facing web server, but the server is not responding with SYN-ACK packets. The analyst also sees that the source IP is spoofed. Which type of network attack is most likely occurring?
Select an answer first - 17
A SOC analyst is reviewing threat intelligence and sees that a hacktivist group has announced a campaign targeting organizations that do business with a certain government. The group's past attacks have included website defacement and DDoS attacks. Which threat actor motivation is most likely driving this campaign?
Select an answer first - 18
Which type of malware is characterized by self-replication and spreading to other systems without user interaction?
Select an answer first - 19
Which web application attack involves injecting malicious SQL code into a query to manipulate a database?
Select an answer first - 20
Which characteristic is most indicative of an Advanced Persistent Threat (APT)?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSA” is a trademark of its owner, used for identification only.