Attack Vectors CCOA Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which network attack vector involves an attacker setting up a rogue access point that impersonates a legitimate wireless network to trick users into connecting?

   • ADNS poisoning
   • BPacket sniffing
   • CEvil twin
   • DARP spoofing
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security team discovers that an attacker has been exploiting a vulnerability in a third-party plugin used by the company's content management system (CMS). The plugin vendor has not released a patch, and the vulnerability is not listed in any public CVE database. The attacker has been using this exploit to upload a web shell to the CMS. Which attack vector is being used, and what is the most effective immediate action?

   • ABrute-force attack; implement account lockout policies
   • BSupply chain attack; terminate the vendor contract
   • CPhishing attack; conduct user awareness training
   • DZero-day exploit; isolate the affected CMS and remove the web shell
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security team discovers that an attacker has exploited a previously unknown vulnerability in the company's web server software. The software vendor has not yet released a patch, and no antivirus signatures detect the exploit. Which type of attack vector does this represent?

   • AA zero-day exploit
   • BA phishing attack
   • CA brute-force attack
   • DA supply chain attack
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security analyst receives a report from an employee who clicked a link in an email that appeared to be from the company's IT help desk. The link led to a page that looked like the corporate single sign-on portal, but the URL was slightly misspelled. The employee entered their username and password before realizing the page was fake. The analyst checks the email headers and finds the message originated from an external domain. Which combination of attack vectors best describes what occurred?

   • AA wireless network attack using a rogue access point to intercept credentials
   • BSpear phishing combined with a zero-day exploit in the browser
   • CMalware delivery via a malicious attachment that installed a keylogger
   • DPhishing combined with credential theft via a lookalike domain
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   An employee accidentally sends a confidential customer database to a personal email address. What type of insider threat does this represent?

   • ASupply chain threat
   • BExternal threat
   • CMalicious insider threat
   • DAccidental insider threat
   Reveal Solution Discussion Select an answer first