Payload Delivery GDAT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of payload obfuscation?

   • ATo make the payload smaller in size so it can be delivered faster.
   • BTo make the payload easier for security analysts to understand.
   • CTo ensure the payload only runs on a specific operating system.
   • DTo hide the payload from detection by security tools such as antivirus and intrusion detection systems.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's users report that after visiting a popular news website, their browsers become unresponsive and then a suspicious executable is launched. The security team suspects malvertising and an exploit kit. The website itself is legitimate and has not been defaced. Which combination of controls would be most effective in preventing this type of payload delivery?

   • ADisable JavaScript in the browser for all sites and require users to manually enable it for trusted sites.
   • BUse a cloud-based sandbox that opens every webpage in a virtual machine before allowing the user to access it.
   • CKeep browsers and plugins patched, use an exploit mitigation tool, and deploy a web filter that blocks known malicious advertising domains.
   • DBlock all advertising domains at the DNS level and enforce a strict allowlist of browser plugins.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security team is investigating a breach at a research lab. They find that a USB drive left in the parking lot was plugged into a scientist's workstation. The USB drive contained a file that, when opened, executed a macro that installed a backdoor. Which two concepts are demonstrated?

   • AEmail attachment and drive-by download
   • BExploit kit and malvertising
   • CRemovable media delivery and payload execution/persistence
   • DWatering hole and obfuscation
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the defining characteristic of a watering hole attack?

   • AThe attacker uses a USB drive to deliver malware to a target by leaving it in a parking lot.
   • BThe attacker compromises a website that is frequently visited by members of the target group, and then uses that site to deliver malware to those visitors.
   • CThe attacker creates a fake Wi-Fi hotspot to intercept traffic from nearby users.
   • DThe attacker sends a spear-phishing email to a specific individual with a malicious attachment.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security analyst is investigating a breach where employees received emails with a malicious link. The link redirected to a legitimate website that had been compromised with a malicious script. The script exploited a browser vulnerability and delivered a payload that was encoded with base64. Which two techniques are being used?

   • AMalvertising and drive-by download
   • BRemovable media and physical delivery
   • CEmail attachment and exploit kit
   • DMalicious link and watering hole
   Reveal Solution Discussion Select an answer first