Emerging Threats, Threat Actors, and Attack Vectors TIE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company's security team is reviewing a new type of ransomware that encrypts files and then exfiltrates data before triggering the encryption. The attackers threaten to release the data if the ransom is not paid. This is an example of which emerging threat characteristic?

   • ADouble extortion ransomware
   • BRansomware-as-a-service (RaaS) operation
   • CFileless malware attack
   • DCryptojacking campaign
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security team is profiling a threat actor that has been observed using commodity malware, phishing kits, and exploiting known vulnerabilities. The actor's targets are small businesses and individuals, and the primary goal appears to be financial gain. Which threat actor category best fits this profile?

   • AFinancially motivated cybercriminal
   • BHacktivist collective
   • CNation-state APT group
   • DInsider threat
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security team is analyzing a series of attacks against a media company's website. The attacks involve defacing the site with political messages and DDoS attacks that disrupt service. The attackers appear to be motivated by a political cause. Which threat actor category is most likely responsible?

   • AHacktivist collective
   • BCybercriminal syndicate
   • CInsider threat
   • DNation-state espionage group
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A manufacturing company's OT network was breached. Investigators found that the initial access was gained through a vulnerability in a legacy industrial control system (ICS) that was directly exposed to the internet. The attackers then moved laterally to the corporate network. Which attack vector best describes the initial compromise?

   • ARemovable media infected with malware
   • BSpear-phishing email with a malicious attachment
   • CSupply chain compromise of a software update
   • DExploitation of an internet-facing vulnerable service
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security team is analyzing a new type of attack that uses AI-generated voice cloning to impersonate a company executive in a phone call, instructing an employee to transfer funds. This is an example of which emerging threat?

   • ASQL injection attack
   • BDeepfake social engineering
   • CRansomware attack
   • DDistributed denial-of-service (DDoS) attack
   Reveal Solution Discussion Select an answer first