Understanding Attack Scenarios and Motivations CT-SEC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Why is security awareness training considered a key mitigation against human-factor attacks?

   • AIt replaces the need for technical security controls
   • BIt reduces the likelihood that employees will fall for social engineering tactics
   • CIt eliminates all technical vulnerabilities in the system
   • DIt guarantees that employees will never make mistakes
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is investigating a series of attacks on a government agency. The attacks involve spear-phishing emails sent to specific employees, with content tailored to their job roles. The emails contain links to fake login pages that harvest credentials. What is the most likely motivation of the attacker?

   • AFinancial gain through ransomware
   • BEspionage, to gain access to sensitive government information
   • CRevenge from a disgruntled employee
   • DHacktivism to expose government secrets
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team is designing a phishing simulation for a company that has a high number of remote workers. The team wants to test the employees' ability to identify phishing emails. Which simulation approach would best assess the human factors in a remote work environment?

   • ASending emails that appear to be from the CEO, requesting urgent action
   • BSending emails that mimic common remote work scenarios, such as IT support for VPN issues
   • CSending generic phishing emails that are commonly used in all industries
   • DSending emails with attachments that appear to be meeting invites
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A tester is evaluating an organization's resistance to social engineering. The tester calls the help desk, pretends to be a new employee who forgot their password, and asks for a temporary password to be reset. The help desk complies. What attack scenario is this?

   • APretexting
   • BTailgating
   • CQuid pro quo
   • DPhishing
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is investigating a data breach where an employee's credentials were used to access a customer database. The analyst finds that the employee had recently been laid off but still had active credentials. What is the most likely motivation for the attack?

   • AFinancial gain from selling customer data
   • BRevenge or resentment from the former employee
   • CEspionage to steal customer information for a competitor
   • DHacktivism to expose data breaches
   Reveal Solution Discussion Select an answer first