Intrusion and Initial Access Techniques GISF Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard · select all that apply

   A company is concerned about removable media attacks. They want to implement a combination of controls that address both the technical and human factors. Select all that apply.

   • AProvide security awareness training on the risks of unknown removable media
   • BConduct regular antivirus scans on all workstations
   • CRequire all employees to use company-issued USB drives
   • DImplement a DLP solution that blocks unauthorized USB devices
   • EDisable USB ports via group policy on all workstations
   Check answers Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of an exploit in the context of gaining access to a system?

   • ATo encrypt the victim's files for ransom
   • BTo scan the network for open ports
   • CTo take advantage of a software vulnerability to execute unauthorized actions
   • DTo trick a user into revealing their password
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's network is breached after employees install a routine software update from a trusted vendor. Later, it is discovered that the update package was tampered with during distribution. Which initial access vector is this?

   • ARemovable media
   • BPhishing
   • CSupply chain attack
   • DCredential theft
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a supply chain attack in the context of initial access?

   • AAn attack that uses social engineering to trick employees of a supplier into revealing information
   • BAn attack that targets the physical supply chain of an organization, such as shipping routes
   • CAn attack that compromises a trusted third-party product or service to gain access to its customers
   • DAn attack that involves stealing credentials from a company's supply chain management system
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   How can a USB drive be used as an initial access vector?

   • ABy physically damaging the computer's USB port
   • BBy acting as a network adapter to connect to the internet
   • CBy increasing the computer's storage capacity
   • DBy containing a malicious file that executes automatically when the drive is inserted
   Reveal Solution Discussion Select an answer first