Intrusion and Initial Access Techniques GISF Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a basic preventive measure against phishing attacks?

   • ABlocking all external emails
   • BUsing the same password for all accounts
   • CUser awareness training on how to recognize suspicious emails
   • DDisabling all email attachments
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A small business receives an email that appears to be from its bank. The email warns of a 'suspicious login' and urges the recipient to click a link and verify their account. The link leads to a look-alike login page that captures credentials. Which combination of controls would most directly reduce the risk of this attack succeeding?

   • AInstall a host-based firewall on all employee workstations and update the antivirus definitions weekly.
   • BDisable all outbound email links using group policy and require users to type URLs manually.
   • CEnable multi-factor authentication on the bank account and train users to verify the sender's email address before clicking links.
   • DIncrease the password complexity requirement to 16 characters and change passwords every 30 days.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security team is prioritizing vulnerabilities to patch. They have a limited maintenance window and must choose between two vulnerabilities: one is a critical remote code execution flaw in a public-facing web server, and the other is a moderate privilege escalation flaw in an internal application. Which should they patch first to best reduce the risk of initial access?

   • AThe moderate privilege escalation flaw in the internal application
   • BPatch both at the same time
   • CPatch neither until the next scheduled maintenance
   • DThe critical remote code execution flaw on the public-facing web server
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   An attacker sends an email to an employee that appears to be from the CEO, asking the employee to purchase gift cards and send the codes. The employee complies. Which social engineering principle is the attacker exploiting?

   • ASocial proof
   • BReciprocity
   • CAuthority
   • DScarcity
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A user receives an email that appears to be from the company's IT help desk, asking them to verify their account by clicking a link and entering their password. The user complies, and later the attacker uses those credentials to access the corporate VPN. Which intrusion lifecycle phase does the attacker's VPN login represent?

   • AReconnaissance
   • BObjective completion
   • CPrivilege escalation
   • DInitial access
   Reveal Solution Discussion Select an answer first