4.2 - Understand Network Threats and Attacks CC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An employee receives an email that appears to be from the IT department, asking them to download and run a 'security update' from a link. The employee runs the file, and shortly after, the employee's credentials are sent to an external server. What type of malware is this, and what control would have most likely prevented it?

   • ATrojan horse; user awareness training and email filtering
   • BSide-channel attack; hardware security module
   • CVirus; firewall configuration
   • DWorm; antivirus software with automatic updates
   Reveal Solution Discussion Select an answer first
2. 2application · easy

   A company's web server is being overwhelmed by a flood of UDP packets from a single source IP. The firewall is currently configured to allow all inbound UDP traffic. What is the most immediate action to mitigate this attack?

   • ACreate a firewall rule to block UDP traffic from the source IP address
   • BDisable the firewall to reduce latency
   • CChange the web server's IP address
   • DIncrease the web server's buffer size to handle more UDP packets
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A security team is preparing for a penetration test. Before attempting to exploit any systems, the team wants to identify which hosts are reachable and which ports are open on those hosts. Which activity should the team perform first?

   • ARun a vulnerability scan against the target network
   • BDeploy a host-based intrusion detection system (HIDS) on all target hosts
   • CPerform a network discovery and port scan
   • DConfigure the firewall to allow all traffic from the testing team's IP
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of a vulnerability scan?

   • ATo identify weaknesses in systems and networks that could be exploited by attackers.
   • BTo monitor network traffic for suspicious activity.
   • CTo detect and remove malware from infected systems.
   • DTo block unauthorized access to a network.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How do worms typically propagate across a network?

   • ABy disguising themselves as legitimate software and tricking users into downloading them.
   • BBy exploiting network vulnerabilities or using network connections to copy themselves to other systems.
   • CBy attaching to email attachments and requiring the recipient to open them.
   • DBy physically infecting removable media and waiting for the user to insert it into another computer.
   Reveal Solution Discussion Select an answer first