Emerging Threats, Threat Actors, and Attack Vectors TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which threat actor type is most likely to be motivated by ideological beliefs and to use distributed denial-of-service (DDoS) attacks to disrupt the operations of organizations they oppose?

   • AHacktivists
   • BCybercriminals
   • CScript kiddies
   • DState-sponsored actors
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A media company has noticed that its website is being defaced with political messages. The attackers claim to be protesting the company's coverage of a recent election. The attacks are not technically sophisticated and are easily reversed. Which threat actor profile best fits?

   • ACybercriminal group seeking financial gain.
   • BState-sponsored APT group conducting cyber warfare.
   • CHacktivist group using website defacement to spread a political message.
   • DInsider threat from a disgruntled employee.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is investigating a breach where the attacker gained access by exploiting a vulnerability in a third-party software component used by the company's application. The attacker then used that access to move laterally. Which attack vector is most likely?

   • ASupply chain attack
   • BBrute-force attack
   • CMan-in-the-middle (MITM) attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's security team is investigating a breach where the attacker used a previously unknown vulnerability in a widely used email server software. The vulnerability was exploited before a patch was available. This type of threat is best described as:

   • AZero-day exploit
   • BRansomware attack
   • CPhishing campaign
   • DDistributed denial-of-service (DDoS) attack
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A retail company has been hit by a ransomware attack that encrypted their point-of-sale systems. The attackers demand a ransom in Bitcoin. The company's threat intelligence team believes the attack is from a known cybercriminal group that typically targets small businesses. Which threat actor profile best fits?

   • AInsider threat from a former employee with a grudge.
   • BFinancially motivated cybercriminal group using ransomware-as-a-service.
   • CHacktivist group protesting the company's labor practices.
   • DState-sponsored APT group conducting cyber warfare.
   Reveal Solution Discussion Select an answer first