Common Motivations and Sources of Computer System Attacks CT-SEC Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security team is investigating a data breach where an employee's credentials were used to access a confidential project repository. The employee had recently received a phone call from someone claiming to be a new IT manager, asking for their password to 'update security settings.' The employee provided the password. The attack is traced to a known cybercrime group. Which combination of human factor and source is most accurate?

   • APretexting; hacktivist
   • BPhishing; nation-state actor
   • CHuman error; insider threat
   • DSocial engineering; organized crime
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An employee receives a phone call from someone claiming to be from the IT help desk, asking the employee to 'verify' their password due to a 'security audit.' The caller knows the employee's name and department. The employee provides the password. Which human factor is most directly exploited?

   • ATrust in a perceived authority figure
   • BDesire to be helpful
   • CLack of awareness about phishing
   • DFear of account suspension
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst discovers that a competitor has been accessing the company's pricing information through a vulnerability in a public-facing web application. The competitor's IP addresses are traced to a known corporate espionage operation. What is the primary motivation for this attack?

   • AFinancial gain
   • BEspionage
   • CPersonal challenge
   • DHacktivism
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team discovers that a disgruntled employee, who was recently terminated, had used their still-active credentials to access the company's customer database and exfiltrate records. The employee had been a system administrator with elevated privileges. Which source of attack does this scenario best illustrate?

   • ANation-state actor
   • BOrganized crime
   • CInsider threat
   • DExternal attacker
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security analyst is investigating a breach where an employee's credentials were used to access a customer database. The employee had recently received an email that appeared to be from the company's HR department, asking them to 'update their benefits information' by clicking a link. The link led to a fake login page that captured the credentials. The attack is traced to a known phishing group. Which human factor is most directly exploited, and what is the primary motivation?

   • ACuriosity about benefits; espionage
   • BTrust in internal communications; financial gain
   • CObedience to authority; personal challenge
   • DFear of losing benefits; hacktivism
   Reveal Solution Discussion Select an answer first