Intrusion and Initial Access Techniques GISF Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization discovers that an attacker accessed their cloud email system using a valid account. The account belonged to a former employee whose credentials were never disabled. Which initial access vector is most directly demonstrated?

   • AExploitation of vulnerabilities
   • BRemovable media attack
   • CCredential-based access
   • DSupply chain attack
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary difference between phishing and spear-phishing?

   • ASpear-phishing only targets executives, while phishing targets all employees.
   • BSpear-phishing targets a specific individual or organization, while phishing is a broad, untargeted attack.
   • CPhishing uses email, while spear-phishing uses phone calls.
   • DPhishing is illegal, while spear-phishing is legal.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a basic detection measure for credential-based initial access attacks?

   • AMonitoring for unusual login times or locations
   • BUsing a firewall to block all incoming traffic
   • CDisabling all user accounts
   • DEncrypting all network traffic
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a mature security awareness program, but a spear-phishing campaign successfully compromised a senior executive. The email was highly personalized, referencing a recent conference the executive attended, and came from a compromised account of a known business partner. Which additional control would be most effective in preventing this type of attack?

   • ARestrict executive email access to a separate, isolated network
   • BIncrease the frequency of security awareness training to monthly
   • CDeploy an email gateway that uses sandboxing to analyze attachments and links
   • DImplement a strict email authentication policy (DMARC) to reject spoofed emails
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why are supply chain attacks particularly dangerous for gaining initial access?

   • AThey require no technical skill to execute
   • BThey are the only way to attack air-gapped networks
   • CThey exploit the trust that organizations place in their vendors and often bypass traditional security controls
   • DThey are always undetectable by antivirus software
   Reveal Solution Discussion Select an answer first