4.2 - Understand Network Threats and Attacks CC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a potential impact of a successful man-in-the-middle attack?

   • AThe attacker can read and modify the data exchanged between the two parties.
   • BThe target's network bandwidth is exhausted by excessive traffic.
   • CThe target's files are encrypted and held for ransom.
   • DThe target system becomes part of a botnet.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why are Trojan horses considered deceptive?

   • AThey appear to be useful or legitimate software while hiding malicious functionality.
   • BThey encrypt files and demand a ransom for decryption.
   • CThey exploit vulnerabilities in network protocols to spread automatically.
   • DThey replicate themselves across networks without the user's knowledge.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A network administrator notices that a worm is spreading rapidly across the internal network, exploiting a vulnerability in a legacy file-sharing protocol. The administrator has identified the worm's signature and wants to stop the spread immediately. The organization has both a NIDS and an IPS deployed. What is the most effective immediate action?

   • AConfigure the NIDS to generate an alert when the worm's signature is detected
   • BConfigure the IPS to drop traffic matching the worm's signature
   • CDisable the file-sharing protocol on all servers
   • DRun a vulnerability scan to identify all affected hosts
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a defining characteristic of a computer worm?

   • AIt self-replicates and spreads across networks without user interaction.
   • BIt disguises itself as a legitimate program to trick users into running it.
   • CIt requires a host file to attach to and spread.
   • DIt encrypts files and demands a ransom for decryption.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A user connects to a public Wi-Fi network at a coffee shop and logs into their corporate email. Later, the user discovers that their email password was changed and sensitive messages were forwarded to an unknown address. The user's laptop was not infected with malware. What is the most likely attack vector?

   • AA man-in-the-middle attack intercepted the login credentials over the unencrypted Wi-Fi connection
   • BA worm exploited a vulnerability in the email client to steal the password
   • CA side-channel attack measured the laptop's power consumption to derive the password
   • DA Trojan horse was installed via the Wi-Fi network without user interaction
   Reveal Solution Discussion Select an answer first