7.1 - Identify and Analyze Malicious Code and Activity SSCP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of malicious activity is characterized by a coordinated network of compromised devices (bots) that are remotely controlled to launch attacks, such as DDoS or spam campaigns?

   • AZero-day exploit
   • BBotnet
   • CAdvanced persistent threat (APT)
   • DInsider threat
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which countermeasure is specifically designed to prevent unauthorized users from transmitting sensitive data outside the organization's network?

   • AUser awareness training
   • BPatching
   • CData loss prevention (DLP) system
   • DSystem hardening
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which countermeasure is most effective in reducing the risk of exploitation of known software vulnerabilities?

   • AUser awareness training
   • BNetwork segmentation
   • CData loss prevention (DLP) system
   • DRegular patching and update management
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's security team notices that a large number of IoT devices on the network are sending a high volume of DNS queries to a single external domain. The queries are small but constant. The team suspects these devices are part of a botnet. What is the primary purpose of the DNS queries in this scenario?

   • AZero-day exploit delivery
   • BData exfiltration of large files
   • CCommand-and-control (C2) communication
   • DDistributed denial-of-service (DDoS) attack traffic
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A company's website is experiencing a DDoS attack. The attack traffic is coming from a large number of distributed IP addresses, and the traffic pattern is low and slow, making it difficult to distinguish from legitimate traffic. The security team needs to mitigate the attack without blocking legitimate users. What is the most effective approach?

   • AIncrease the bandwidth of the web server to absorb the attack
   • BBlock all traffic from the IP addresses identified in the attack
   • CDisable the website until the attack stops
   • DUse a DDoS mitigation service that employs behavior analytics to identify and filter anomalous traffic patterns
   Reveal Solution Discussion Select an answer first