Emerging Threats, Threat Actors, and Attack Vectors TIE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst is investigating a new type of malware that does not write any files to disk and runs entirely in memory. The malware uses legitimate system tools to carry out its activities. This is an example of which emerging threat?

   • ATrojan horse
   • BFileless malware
   • CRansomware
   • DWorm
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A financial institution has observed a new type of malware that uses legitimate Windows administrative tools to disable security software and then encrypts specific files. The malware does not use any known signatures. The institution's security team wants to detect and prevent this threat. Which approach is most effective?

   • AIncrease the frequency of full system scans on all endpoints.
   • BDisable all Windows administrative tools to prevent their misuse.
   • CImplement behavioral detection and endpoint detection and response (EDR) tools that monitor for unusual use of administrative tools.
   • DRely on traditional antivirus software with updated signature databases.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team is analyzing a new type of attack that uses a combination of phishing and a previously unknown vulnerability in a popular browser plugin. The attack is designed to steal credentials and then use them to access cloud services. The team must decide how to prioritize their response. Which action should be taken first?

   • AReset all user credentials and enforce multi-factor authentication (MFA)
   • BMonitor cloud services for unauthorized access
   • CConduct user awareness training on phishing
   • DIdentify and patch the browser plugin vulnerability
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A law firm has been targeted by a series of emails that appear to be from a court, containing a link to a fake document that downloads malware. The malware is designed to steal credentials and sensitive client information. Which attack vector is being used?

   • AWatering hole attack on a website frequently visited by the firm.
   • BPhishing via email with a malicious attachment or link.
   • CMan-in-the-middle attack intercepting the firm's network traffic.
   • DSQL injection attack on the firm's case management system.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A non-profit organization that advocates for human rights has been targeted by a series of phishing emails containing malware that can take over webcams and microphones. The organization suspects a government-backed group is trying to monitor their activities. Which threat actor profile best fits this scenario?

   • ACybercriminal group seeking financial gain through ransomware.
   • BHacktivist group trying to expose the non-profit's internal communications.
   • CState-sponsored APT group conducting surveillance on activists.
   • DInsider threat from a disgruntled employee.
   Reveal Solution Discussion Select an answer first