4.2 - Understand Network Threats and Attacks CC Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security researcher is analyzing a hardware security module (HSM) used to store cryptographic keys. The researcher discovers that the HSM's power consumption varies slightly depending on the key being used. By analyzing these variations, the researcher is able to recover the key. Which type of attack is this, and what is the most effective mitigation?

   • AMan-in-the-middle attack; mitigate by using a VPN
   • BDDoS attack; mitigate by using a load balancer
   • CSide-channel attack; mitigate by using constant-time algorithms and adding noise to the power consumption
   • DTrojan horse; mitigate by using antivirus software
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A user downloads a 'free PDF converter' from a pop-up advertisement. After installation, the user's browser homepage changes and unwanted toolbars appear. The user did not notice any unusual behavior during installation. What type of malware is this most likely to be?

   • ASide-channel attack, because it exploited the browser's physical characteristics
   • BWorm, because it spread through the pop-up advertisement
   • CTrojan horse, because the software appears legitimate but performs hidden malicious actions
   • DVirus, because it attached itself to the PDF converter
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   How does an Intrusion Detection System (IDS) typically respond to detected suspicious activity?

   • AIt generates an alert for security administrators to review.
   • BIt quarantines the affected system from the network.
   • CIt patches the vulnerability that was exploited.
   • DIt automatically blocks the source IP address.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary impact of a successful DDoS attack on a network service?

   • ALoss of availability, making the service inaccessible to legitimate users.
   • BModification of data transmitted between the service and its users.
   • CInstallation of malware on the service's underlying operating system.
   • DUnauthorized access to sensitive data stored on the service.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary function of antivirus software?

   • ATo scan systems for vulnerabilities and report them.
   • BTo monitor network traffic for suspicious activity.
   • CTo filter network traffic based on security rules.
   • DTo detect and remove malware from systems.
   Reveal Solution Discussion Select an answer first