Emerging Threats, Threat Actors, and Attack Vectors TIE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team is evaluating a new ransomware variant that not only encrypts files but also uses a known vulnerability in a remote desktop protocol (RDP) to spread across the network. The team must decide on a mitigation strategy. Which approach is most effective in preventing this specific attack vector?

   • AUse application allowlisting to prevent ransomware execution
   • BPatch the RDP vulnerability and restrict RDP access
   • CImplement email filtering to block phishing emails
   • DDeploy endpoint detection and response (EDR) only
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A gaming company has been experiencing distributed denial-of-service (DDoS) attacks that disrupt their online multiplayer servers. The attacks are not very sophisticated but are persistent and often occur during peak gaming hours. The company suspects a competitor is behind the attacks. Which threat actor profile is most likely?

   • AA hacktivist group protesting the company's business practices.
   • BA state-sponsored APT group conducting cyber warfare.
   • CA disgruntled former employee with knowledge of the company's infrastructure.
   • DA financially motivated cybercriminal group using DDoS-for-hire services to extort the company.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company's network has been breached. The attacker gained access through a phishing email and then used a vulnerability in a web server to move laterally. The company's security team has identified the initial phishing email and the web server vulnerability. They want to implement controls to prevent similar attacks in the future. Which combination of controls is most effective?

   • AOnly patch the web server vulnerability.
   • BOnly implement email filtering and user awareness training.
   • CImplement email filtering and user awareness training, and patch the web server vulnerability.
   • DDeploy a network intrusion detection system (IDS) to monitor for similar attacks.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which attack vector involves an attacker intercepting and potentially altering communications between two parties without their knowledge?

   • ADenial-of-service (DoS) attack
   • BCross-site scripting (XSS)
   • CMan-in-the-middle (MITM) attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is profiling a threat actor that has been observed using zero-day exploits, maintaining long-term persistence in high-value targets, and operating with a high level of operational security. The actor's targets are primarily government agencies and defense contractors. Which threat actor category best fits this profile?

   • ANation-state advanced persistent threat (APT) group
   • BScript kiddie
   • CHacktivist collective
   • DFinancially motivated cybercriminal syndicate
   Reveal Solution Discussion Select an answer first