Attack Vectors CCOA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company with a strict 'clean desk' policy discovers that a contractor with badge access to the building has been leaving USB drives plugged into unattended workstations in the finance department. The contractor claims they were just charging their phone. A security review finds that the USB drives contain a keystroke logger. Which combination of attack vectors is most likely being used, and what is the most effective control to prevent this?

   • ASupply chain attack and zero-day exploit; implement vendor assessments and patch management
   • BCredential theft and SQL injection; implement MFA and web application firewalls
   • CWireless attack and phishing; implement WPA3 and email filtering
   • DPhysical attack and insider threat; implement USB port controls and enforce a clean desk policy
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which social engineering technique involves an attacker impersonating a trusted individual or authority figure to manipulate a victim into revealing sensitive information?

   • APharming
   • BTailgating
   • CShoulder surfing
   • DPretexting
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst notices a large number of failed login attempts against the company's VPN gateway from a single IP address. The attempts are using common passwords against multiple usernames. The analyst also observes that some attempts are using usernames that match employees in the finance department. Which attack technique is the attacker most likely using?

   • AA keylogging attack
   • BA SQL injection attack
   • CA password spraying attack
   • DA man-in-the-middle attack
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary characteristic of a brute force attack?

   • AIt relies on tricking the user into revealing their password
   • BIt exploits a vulnerability in the authentication system to bypass password checks
   • CIt uses a keylogger to capture the password as it is typed
   • DIt systematically tries many possible passwords until the correct one is found
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company's security team is investigating a breach where an attacker gained access to a user's account. The user reports that they received an email with a link to a website that looked identical to the company's internal portal. The user entered their credentials, and the attacker then used those credentials to access the real portal. The company uses multi-factor authentication (MFA), but the attacker was still able to bypass it. Which attack vector was most likely used, and what is the most effective mitigation?

   • AInsider threat; implement data loss prevention (DLP)
   • BBrute-force attack; implement account lockout policies
   • CPhishing with an adversary-in-the-middle (AiTM) proxy; implement phishing-resistant MFA (e.g., FIDO2)
   • DSQL injection; implement parameterized queries
   Reveal Solution Discussion Select an answer first